VB Blog

VB2015 conference programme announced

Posted by   Virus Bulletin on   Mar 31, 2015

From drones to elephants: an exciting range of topics will be covered in Prague.

Read more  

Paper: a timeline of mobile botnets

Posted by   Virus Bulletin on   Mar 30, 2015

Ruchna Nigam provides an overview of more than 60 mobile malware families.

Read more  

Paper: Dylib hijacking on OS X

Posted by   Virus Bulletin on   Mar 19, 2015

Patrick Wardle shows how OS X is also vulnerable to once common Windows attacks.

Read more  

Paper: Windows 10 patching process may leave enterprises vulnerable to zero-day attacks

Posted by   Virus Bulletin on   Mar 12, 2015

Aryeh Goretsky gives advice on how to adapt to Windows 10's patching strategy.

Read more  

Will DIME eventually replace email?

Posted by   Virus Bulletin on   Mar 12, 2015

Protocol has all the advantages of email, yet is orders of magnitude more secure.

Read more  

The ghost of Stuxnet past

Posted by   Virus Bulletin on   Mar 11, 2015

Microsoft patches .LNK vulnerability after 2010 patch was found to be incomplete.

Read more  

Canadian firm fined $1.1m for breaching anti-spam law

Posted by   Virus Bulletin on   Mar 6, 2015

First success story for long-awaited CASL.

Read more  

Virus Bulletin seeks hackers, network researchers for VB2015

Posted by   Virus Bulletin on   Mar 6, 2015

One week left to submit an abstract for the 25th Virus Bulletin conference.

Read more  

VB2014 paper: Leaving our ZIP undone: how to abuse ZIP to deliver malware apps

Posted by   Virus Bulletin on   Mar 5, 2015

Gregory Panakkal explains that there are different ways of looking at APK files - and that sometimes that can have unintended consequences.

Read more  

FREAK attack takes HTTPS connections back to 1990s security

Posted by   Virus Bulletin on   Mar 4, 2015

Golden keys from the (first) crypto wars have come back to haunt us.

Read more  

Search blog

December issue of VB published

The December issue of Virus Bulletin is now available for subscribers to download.
The December issue of Virus Bulletin is now available for subscribers to download. The December 2007 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2007/12/december-issue-vb-published/

Opening of a (spam) can of worms

Hormel loses latest trademark battle.
Hormel loses latest trademark battle.Hormel Foods Corp., inventor and manufacturer of the world-famous canned meat product SPAM, has lost a lawsuit against Seattle-based company… https://www.virusbulletin.com/blog/2007/12/opening-spam-can-worms/

Teenage botherder arrested in New Zealand

International cooperation also leads to eight arrests in the US.
International cooperation also leads to eight arrests in the US. Police in New Zealand have arrested an 18-year-old youth believed to be the herder of a botnet of 1.3 million… https://www.virusbulletin.com/blog/2007/11/teenage-botherder-arrested-new-zealand/

SANS issues vulnerability top 20

Annual study of security risks finds software and humans present dangers.
Annual study of security risks finds software and humans present dangers. The SANS Institute has released its annual survey of vulnerabilities putting computer systems and networks… https://www.virusbulletin.com/blog/2007/11/sans-issues-vulnerability-top-20/

Webroot merges with UK managed service firm

Anti-spyware firm moves into SaaS arena
Anti-spyware firm moves into SaaS arena Anti-spyware specialist Webroot has announced a merger with UK-based software-as-a-service firm Email Systems, expanding its provisions… https://www.virusbulletin.com/blog/2007/11/webroot-merges-uk-managed-service-firm/

AVAR 2007 opens in Seoul

Asian and global malware experts gather to discuss latest trends
Asian and global malware experts gather to discuss latest trends The annual conference of the Association of anti Virus Asia Researchers (AVAR) has convened in the comfortable… https://www.virusbulletin.com/blog/2007/11/avar-2007-opens-seoul/

Inconvenient content

Hackers include spammish content into Al Gore's website.
Hackers include spammish content into Al Gore's website. Hackers have managed to break into a website set up to promote Al Gore's film An Inconvenient Truth and include links to… https://www.virusbulletin.com/blog/2007/11/inconvenient-content/

QuickTime flaw could open Windows PCs to hackers

Firefox users most vulnerable; Internet Explorer users should be wary too.
Firefox users most vulnerable; Internet Explorer users should be wary too. Polish security researcher Krystian Kloskowski has published a proof-of-concept exploit for a… https://www.virusbulletin.com/blog/2007/11/quicktime-flaw-could-open-windows-pcs-hackers/

Five-year-old design flaw found in all Windows versions

Microsoft engineers spend Thanksgiving holidays writing patch.
Microsoft engineers spend Thanksgiving holidays writing patch. During the Kiwicon conference earlier this month, ethical hacker Beau Butler from New Zealand disclosed a design flaw… https://www.virusbulletin.com/blog/2007/11/five-year-old-design-flaw-found-all-windows-versions/

One in four consider online banking unsafe

Virus Bulletin finds that one in four users consider online banking to be unsafe, but manage their accounts online regardless, while 50% of users consider online banking to be risk free.
Virus Bulletin finds that one in four users consider online banking to be unsafe, but manage their accounts online regardless, while 50% of users consider online banking to be risk… https://www.virusbulletin.com/blog/2007/11/one-four-consider-online-banking-unsafe/

Two fixes released on lightweight Patch Tuesday

Monthly security update covers just couple of dangers.
Monthly security update covers just couple of dangers.Microsoft has released its monthly 'Patch Tuesday' security bulletin, with only two patches issued, one rated 'Important' and… https://www.virusbulletin.com/blog/2007/11/two-fixes-released-lightweight-patch-tuesday/

Pushy scamware ads served by DoubleClick

Advertising network provided ads for rogue security product.
Advertising network provided ads for rogue security product. Online advertising system DoubleClick, part of an ongoing acquisition attempt by Google, has allowed a wave of… https://www.virusbulletin.com/blog/2007/11/pushy-scamware-ads-served-doubleclick/

Infected Seagate hard drives sold in Taiwan

External Maxtor disks shipped carrying autorun datastealer.
External Maxtor disks shipped carrying autorun datastealer. A shipment of Maxtor external hard drives, produced in Thailand by US-based Seagate and sold in Taiwan, has been found… https://www.virusbulletin.com/blog/2007/11/infected-seagate-hard-drives-sold-taiwan/

US botnet master confesses to crimes

Security consultant to plead guilty, could face heavy sentence.
Security consultant to plead guilty, could face heavy sentence. A Los Angeles man has agreed to plead guilty to several counts of fraud and unauthorised interfering with computer… https://www.virusbulletin.com/blog/2007/11/us-botnet-master-confesses-crimes/

Russian Business Network leaves Russia

Leading cybercrime hosting hub moves business to fresh pastures.
Leading cybercrime hosting hub moves business to fresh pastures. The notorious Russian Business Network (RBN), recently making headlines for the massive amounts of malicious and… https://www.virusbulletin.com/blog/2007/11/russian-business-network-leaves-russia/

Phished Salesforce.com data used for phishing attacks

Password leak leads to major CRM customer data haul.
Password leak leads to major CRM customer data haul. A security breach at customer relationship management (CRM) firm Salesforce.com has led to a large-scale leak of confidential… https://www.virusbulletin.com/blog/2007/11/phished-salesforce-com-data-used-phishing-attacks/

Sophos announces plans to float

Listing on London Stock Exchange expected soon.
Listing on London Stock Exchange expected soon. The long-anticipated floatation of Sophos, one of the biggest privately owned security firms, has been announced this week, with the… https://www.virusbulletin.com/blog/2007/11/sophos-announces-plans-float/

Symantec joins data leak frenzy

Vontu purchase latest move in data protection trend.
Vontu purchase latest move in data protection trend.Symantec has announced the $350 million purchase of data leak prevention firm Vontu, following several similar moves by major… https://www.virusbulletin.com/blog/2007/11/symantec-joins-data-leak-frenzy/

LinkedIn providing open redirect

Lax website setup could be used to trick the unwary.
Lax website setup could be used to trick the unwary. Popular professional networking system LinkedIn has been allowing free redirects from its website, providing spammers and… https://www.virusbulletin.com/blog/2007/11/linkedin-providing-open-redirect/

Kaspersky teams up with Bit9

Whitelisting knowledgebase to be used in future security products.
Whitelisting knowledgebase to be used in future security products. A strategic partnership has been announced between Kaspersky Labs and application control specialist Bit9. The… https://www.virusbulletin.com/blog/2007/11/kaspersky-teams-bit9/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.