VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

April

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/04/

New sentencing, new legislation

United States Sentencing Commission gets busy...
United States Sentencing Commission gets busy... The United States Sentencing Commission (USSC) — the body tasked with refining the sentencing portions of new legislation — met… https://www.virusbulletin.com/blog/2004/04/new-sentencing-new-legislation/

Shrinking violets

Consolidation in the anti-spam industry
Consolidation in the anti-spam industry A report released by Gartner last month predicts consolidation in the anti-spam industry and a rapid contraction of the pool of anti-spam… https://www.virusbulletin.com/blog/2004/04/shrinking-violets/

Patent for Postini

Postini wins U.S. patent for email filtering
Postini wins U.S. patent for email filtering Managed email security company Postini has been granted a U.S. patent for email filtering technology.According to the patent, any… https://www.virusbulletin.com/blog/2004/03/patent-postini/

Roll up, roll up

AOL raffles spammer's Porsche
AOL raffles spammer's Porsche Taking a new angle on hitting spammers where it hurts, AOL is offering its members the opportunity to win a luxury car seized as part of a court… https://www.virusbulletin.com/blog/2004/03/roll-roll/

New kid on the certification block

CheckVir starts certification program
CheckVir starts certification program At the start of this year, CheckVir became the latest independent organisation to offer certification for anti-virus products, when the… https://www.virusbulletin.com/blog/2004/03/new-kid-certification-block/

A bit of R&R

Man. Loves. His. Spam. No really.
Man. Loves. His. Spam. No really. Some choose Yoga, others choose a glass of wine and a soak in a hot bath, and some, apparently, choose reading spam as their preferred method of… https://www.virusbulletin.com/blog/2004/03/bit-r-amp-r/

News summary

AMD introduces hardware-level AV protection
AMD introduces hardware-level AV protection AMD has launched its new Athlon 64 FX processor at the CeBIT trade show in Hanover, Germany. Aimed primarily at the PC gamer market,… https://www.virusbulletin.com/blog/2004/03/news-summary/

ISPs refile lawsuits

AOL and EarthLink refile suits against spammers
AOL and EarthLink refile suits against spammers US Internet service providers AOL and EarthLink have each refiled lawsuits against prolific spammers. A Florida man and married… https://www.virusbulletin.com/blog/2004/03/isps-refile-lawsuits/

March

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/03/

Fine for dialler spam

UK watchdog fines US company for sending spam
UK watchdog fines US company for sending spam A UK watchdog has fined a US company for sending spam. The fine was imposed by the UK's regulatory body for the premium rate… https://www.virusbulletin.com/blog/2004/03/fine-dialler-spam/

SMS spam goes down Down Under

Anti-spam code of conduct proves successful
Anti-spam code of conduct proves successful Australia's Telecommunications Industry Ombudsman reports that a code of conduct aimed at preventing SMS spam has been highly… https://www.virusbulletin.com/blog/2004/03/sms-spam-goes-down-down-under/

Errata: Windows NT comparative review

After re-testing, Alwil's AVAST! product gains a VB 100% award.
After re-testing, Alwil's AVAST! product gains a VB 100% award. The results were reviewed for two products in the Windows NT comparative review (VB February 2004, p.12), with the… https://www.virusbulletin.com/blog/2004/02/errata-windows-nt-comparative-review/

China sets deadline for spammers

China blacklists offending IP addresses
China blacklists offending IP addresses The Internet Society of China's Anti-Spam Coordination Team (ASCT) has published a blacklist of mail servers sending spam. The list… https://www.virusbulletin.com/blog/2004/02/china-sets-deadline-spammers/

Plans, acquisitions and royalty

NAI makes plans, Symantec acquires software manufacturer, Sophos receives royal visitors
NAI makes plans, Symantec acquires software manufacturer, Sophos receives royal visitors Network Associates Inc. (NAI) has unveiled plans to provide its customers with information… https://www.virusbulletin.com/blog/2004/02/plans-acquisitions-and-royalty/

Gigabyte arrested

Well known female virus writer arrested. Finally.
Well known female virus writer arrested. Finally. Last month the Belgian Federal Crime Unit reported that they had arrested and questioned the virus writer known as 'Gigabyte'.… https://www.virusbulletin.com/blog/2004/02/gigabyte-arrested/

More core wars

Virus vs virus - new Welchia variant seeks to destroy Mydoom.
Virus vs virus - new Welchia variant seeks to destroy Mydoom. Today we can say our goodbyes to Mydoom.A - which is programmed to stop spreading on today's date, 12 February 2004.… https://www.virusbulletin.com/blog/2004/02/more-core-wars/

News summary

Why technical writing is best left to technical journalists, Netcraft monitors SCO, and February's VB magazine
Why technical writing is best left to technical journalists, Netcraft monitors SCO, and February's VB magazine There is yet another great rant on the ZDNet website. Josh Mehlman… https://www.virusbulletin.com/blog/2004/02/news-summary/

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/02/

Congressional attack on inboxes

US Congressional representatives send bulk email
US Congressional representatives send bulk email While congratulating themselves for (supposedly) stemming the flow of spam with the passage of the CAN-SPAM anti-spam… https://www.virusbulletin.com/blog/2004/01/congressional-attack-inboxes/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.