VB Blog

VB2021 localhost call for papers: a great opportunity

Posted by   Virus Bulletin on   Mar 17, 2021

VB2021 localhost presents an exciting opportunity to share your research with an even wider cross section of the IT security community around the world than usual, without having to take time out of your work schedule (or budget) to travel.

Read more  

New article: Excel Formula/Macro in .xlsb?

Posted by   Virus Bulletin on   Mar 2, 2021

In a follow-up to an article published last week, Kurt Natvig takes us through the analysis of a new malicious sample using the .xlsb file format.

Read more  

New article: Decompiling Excel Formula (XF) 4.0 malware

Posted by   Virus Bulletin on   Feb 23, 2021

In a new article, researcher Kurt Natvig takes a close look at XF 4.0 malware.

Read more  

The Bagsu banker case - presentation

Posted by   Virus Bulletin on   Jan 29, 2021

At VB2019, CSIS researcher Benoît Ancel spoke about a quiet banking trojan actor that has been targeting German users since at least 2014.

Read more  

VB2021 call for papers - now open, to all!

Posted by   Virus Bulletin on   Jan 19, 2021

The call for papers for VB2021 is now open and we want to hear from you - we're planning for flexible presentation formats, so everyone is encouraged to submit, regardless of whether or not you know at this stage whether you'll be able to travel to Prague!

Read more  

In memoriam: Yonathan Klijnsma

Posted by   Virus Bulletin on   Jan 11, 2021

We were very sorry to learn of the passing of researcher Yonathan Klijnsma last week. Here, former VB Editor Martijn Grooten shares his memories of a talented researcher and a very kind person: this month, infosec lost a really good one.

Read more  

VB2020 localhost videos available on YouTube

Posted by   Virus Bulletin on   Jan 8, 2021

VB has made all VB2020 localhost presentations available on the VB YouTube channel, so you can now watch - and share - any part of the conference freely and without registration.

Read more  

VB2020 presentation & paper: 2030: backcasting the potential rise and fall of cyber threat intelligence

Posted by   Virus Bulletin on   Dec 8, 2020

At VB2020 localhost, threat intelligence consultant Jamie Collier used the analytical technique of backcasting to look at the rise and fall of the cyber threat intelligence industry.

Read more  

VB2020 presentation: Behind the Black Mirror: simulating attacks with mock C2 servers

Posted by   Virus Bulletin on   Dec 4, 2020

At VB2020 localhost, Carbon Black's Scott Knight presented an approach he and his colleagues have taken to more realistically simulate malware attacks.

Read more  

VB2020 presentation & paper: Advanced Pasta Threat: mapping threat actor usage of open-source offensive security tools

Posted by   Virus Bulletin on   Dec 2, 2020

At VB2020, researcher Paul Litvak revealed how he put together a comprehensive map of threat actor use of open-source offensive security tools.

Read more  

Search blog

All in the name

Grisoft becomes AVG.
Grisoft becomes AVG. Last month, Czech firm Grisoft, developer of widely used anti-malware product AVG, changed its corporate name to AVG Technologies CZ, s.r.o. Having operated… https://www.virusbulletin.com/blog/2008/01/all-name/

No taste for spam?

ICANN takes steps to combat domain tasting.
ICANN takes steps to combat domain tasting. The practice of domain tasting, often used by spammers and other shady types to register tens of thousands of Internet domain names at… https://www.virusbulletin.com/blog/2008/01/no-taste-spam/

Prolific spammer indicted

Notorious spammer Alan Ralsky charged with spamming and stock fraud.
Notorious spammer Alan Ralsky charged with spamming and stock fraud. Infamous prolific spammer Alan Ralsky has been indicted over his alleged involvement in an international… https://www.virusbulletin.com/blog/2008/01/prolific-spammer-indicted/

2008

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsMS to release out-of-band patch for critical IE vulnerabilityUsers advised to patch ASAP. 17 December 2008IE zero-day danger growingLarge numbers of users vulnerable to… https://www.virusbulletin.com/blog/2008/

Spammers and scammers in court

Spammers required to pay $200,000; 419 scammers face prison sentence.
Spammers required to pay $200,000; 419 scammers face prison sentence. The US Federal Trade Commission (FTC) has settled a court case with a spamming advertising company.… https://www.virusbulletin.com/blog/2008/01/spammers-and-scammers-court/

Guidelines issued for UK hacker tool ban

Government issues guidelines in response to lobbying.
Government issues guidelines in response to lobbying. The British government has published a set of guidelines for the application of a law that makes it illegal to create or… https://www.virusbulletin.com/blog/2008/01/guidelines-issued-uk-hacker-tool-ban/

Magic lanterns shine at terrorists

Virus Bulletin finds 40% of users think governments should write viruses to bug terrorists.
Virus Bulletin finds 40% of users think governments should write viruses to bug terrorists.In a survey of visitors to the Virus Bulletin website, 40% of computer users said they… https://www.virusbulletin.com/blog/2007/12/magic-lanterns-shine-terrorists/

$3.2 billion lost in phishing attacks in 2007

Gartner survey reveals US losses to phishing gangs.
Gartner survey reveals US losses to phishing gangs. Analyst firm Gartner has estimated that $3.2 billion was lost by 3.6 million US computer users in phishing attacks over the 12… https://www.virusbulletin.com/blog/2007/12/3-2-billion-lost-phishing-attacks-2007/

Zero-day exploit for Japanese word processor Ichitaro

Trend Micro notes increase in regionally targeted attacks as trojan becomes latest to exploit a Ichitaro flaw.
Trend Micro notes increase in regionally targeted attacks as trojan becomes latest to exploit a Ichitaro flaw. A trojan has been found to be exploiting a buffer overflow… https://www.virusbulletin.com/blog/2007/12/zero-day-exploit-japanese-word-processor-ichitaro/

Survey finds 75% lose trust in data-loss firms

Security breaches seriously undermining public respect.
Security breaches seriously undermining public respect. A survey carried out jointly by security company Check Point and research firm YouGov has found public reaction to data… https://www.virusbulletin.com/blog/2007/12/survey-finds-75-lose-trust-data-loss-firms/

Four IE bugs fixed by Patch Tuesday release

Seven updates, three critical in monthly security update.
Seven updates, three critical in monthly security update.Microsoft has released its monthly 'Patch Tuesday' security bulletin, featuring seven updates of which three are marked… https://www.virusbulletin.com/blog/2007/12/four-ie-bugs-fixed-patch-tuesday-release/

Latest VB100 announced

Windows Server 2003 products to be tested.
Windows Server 2003 products to be tested. VB has issued a call for submissions for the latest VB100 comparative review, which will measure the performance of products for the… https://www.virusbulletin.com/blog/2007/12/latest-announced/

VB100 update

Several issues resulting from recent Windows 2000 test cleared up.
Several issues resulting from recent Windows 2000 test cleared up. After a busy and drama-filled VB100 month, several issues arising from the test have been subject to further… https://www.virusbulletin.com/blog/2007/12/update/

Cyber attackers breach defences at secret US labs

Spearphishing and trojans penetrate research lab security.
Spearphishing and trojans penetrate research lab security. At least one major US science lab, used to handle highly classified government and military material, has had its… https://www.virusbulletin.com/blog/2007/12/cyber-attackers-breach-defences-secret-us-labs/

Grisoft acquires Exploit Prevention Labs

AVG to incorporate LinkScanner in further consolidation of security offerings.
AVG to incorporate LinkScanner in further consolidation of security offerings.Grisoft, developer of the AVG security product whose free version is widely deployed on home-user… https://www.virusbulletin.com/blog/2007/12/grisoft-acquires-exploit-prevention-labs/

UK spooks spooked by possible Chinese hacking

MI5 warns of suspected corporate espionage onslaught.
MI5 warns of suspected corporate espionage onslaught. The UK security service MI5 has issued an alert to 300 leading firms, warning them to ensure best possible security measures… https://www.virusbulletin.com/blog/2007/12/uk-spooks-spooked-possible-chinese-hacking/

December issue of VB published

The December issue of Virus Bulletin is now available for subscribers to download.
The December issue of Virus Bulletin is now available for subscribers to download. The December 2007 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2007/12/december-issue-vb-published/

Opening of a (spam) can of worms

Hormel loses latest trademark battle.
Hormel loses latest trademark battle.Hormel Foods Corp., inventor and manufacturer of the world-famous canned meat product SPAM, has lost a lawsuit against Seattle-based company… https://www.virusbulletin.com/blog/2007/12/opening-spam-can-worms/

Vista fails to reassure web users

50% of users don't believe Vista has made the Internet any safer.
50% of users don't believe Vista has made the Internet any safer. According to a recent poll, 50% of visitors to the VB website do not believe that Windows Vista has made the… https://www.virusbulletin.com/blog/2007/12/vista-fails-reassure-web-users/

Yuletide greetings

Festive wishes.
Festive wishes. The members of the VB team extend their warm wishes to Virus Bulletin readers for a very happy holiday season and a healthy and prosperous new year. This Christmas… https://www.virusbulletin.com/blog/2007/12/yuletide-greetings/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.