VB Blog

VB2017 paper: Nine circles of Cerber

Posted by   Martijn Grooten on   Dec 15, 2017

Cerber is one of the major names in the world of ransomware, and last year, Check Point released a decryption service for the malware. Today, we publish a VB2017 paper by Check Point's Stanislav Skuratovich describing how the Cerber decryption tool worked; we have also uploaded the video of the presentation of this paper, by Or Eshed and Yaniv Balmas.

Read more  

Attack on Fox-IT shows how a DNS hijack can break multiple layers of security

Posted by   Martijn Grooten on   Dec 14, 2017

Dutch security firm Fox-IT deserves praise for being open about an attack on its client network. There are some important lessons to be learned about DNS security from its post-mortem.

Read more  

Throwback Thursday: BGP - from route hijacking to RPKI: how vulnerable is the Internet?

Posted by   Martijn Grooten on   Dec 14, 2017

For this week's Throwback Thursday, we look back at the video of a talk Level 3's Mike Benjamin gave at VB2016 in Denver, on BGP and BGP hijacks.

Read more  

Security Planner gives security advice based on your threat model

Posted by   Martijn Grooten on   Dec 13, 2017

Citizen Lab's Security Planner helps you improve your online safety, based on the specific threats you are facing.

Read more  

VB2017 video: Spora: the saga continues a.k.a. how to ruin your research in a week

Posted by   Martijn Grooten on   Dec 11, 2017

Today, we publish the video of the VB2017 presentation by Avast researcher Jakub Kroustek and his former colleague Előd Kironský, now at ESET, who told the story of Spora, one of of the most prominent ransomware families of 2017.

Read more  

VB2017 paper: Modern reconnaissance phase on APT – protection layer

Posted by   Martijn Grooten on   Dec 7, 2017

During recent research, Cisco Talos researchers observed the ways in which APT actors are evolving and how a reconnaissance phase is included in the infection vector in order to protect valuable zero-day exploits or malware frameworks. At VB2017 in Madrid, two of those researchers, Paul Rascagneres and Warren Mercer, presented a paper detailing five case studies that demonstrate how the infection vector is evolving. Today we publish both Paul and Warren's paper and the recording of their presentation.

Read more  

VB2017 paper: Peering into spam botnets

Posted by   Martijn Grooten on   Dec 1, 2017

At VB2017 in Madrid, CERT Poland researchers Maciej Kotowicz and Jarosław Jedynak presented a paper detailing their low-level analysis of five spam botnets. Today we publish their full paper.

Read more  

Throwback Thursday: Anti-malware testing undercover

Posted by   Martijn Grooten on   Nov 30, 2017

We look back at the VB2016 presentation by Righard Zwienenberg (ESET) and Luis Corrons (Panda Security), in which they discussed various issues relating to anti-malware testing.

Read more  

Virus Bulletin relaunches VB Security Jobs Market for both employers and job seekers

Posted by   Martijn Grooten on   Nov 30, 2017

As an independent body in the IT security industry, Virus Bulletin is in an ideal position to act as a global source of information both about jobs currently available in the field and about those candidates currently seeking to start or progress their career in the industry - which is why we have relaunched the VB Security Jobs Market.

Read more  

VB2017 paper: Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server

Posted by   Martijn Grooten on   Nov 29, 2017

At VB2017 in Madrid, macOS malware researcher Patrick Wardle presented the details of a specific piece of Mac malware, FruitFly, which he analysed through a custom C&C server - a technique that will also be of interest for researchers of malware on other platforms. Today we publish both Patrick's paper and the recording of his presentation.

Read more  

Search blog

VB2006 a resounding success - VB2007 dates revealed

As another VB conference comes to a close, dates for next year's conference are revealed.
As another VB conference comes to a close, dates for next year's conference are revealed. VB2006, which took place in Montréal last week has been declared a resounding success by… https://www.virusbulletin.com/blog/2006/10/resounding-success-dates-revealed/

McAfee stock scandal claims bosses

CEO leaves, president fired over financial problems.
CEO leaves, president fired over financial problems. Investigations into irregularities in McAfee's finances have led to the resignation of the company CEO and board chairman… https://www.virusbulletin.com/blog/2006/10/mcafee-stock-scandal-claims-bosses/

Met warns Haxdoor victims

Police notify 2,300 their details have been stolen.
Police notify 2,300 their details have been stolen. London's Metropolitan Police has contacted over 2,300 computer users to inform them that their details have been found on a… https://www.virusbulletin.com/blog/2006/10/met-warns-haxdoor-victims/

Domain name threat to Spamhaus

Anti-spam system at risk of losing identity.
Anti-spam system at risk of losing identity. The recent case in which a US court found anti-spam organisation Spamhaus guilty of mislabelling a company as spammers may take a… https://www.virusbulletin.com/blog/2006/10/domain-name-threat-spamhaus/

False false positives

BitDefender defends reputation, three more VB100% awards granted.
BitDefender defends reputation, three more VB100% awards granted. Since the publication of the recent VB100% results, several of the files from the clean test set causing false… https://www.virusbulletin.com/blog/2006/10/false-false-positives/

Eight years for Russian DoS blackmailers

Extortion gang sentenced for gambling site attacks.
Extortion gang sentenced for gambling site attacks. A team of three found guilty of computer crimes and extortion have been sentenced to eight years imprisonment by a Russian… https://www.virusbulletin.com/blog/2006/10/eight-years-russian-dos-blackmailers/

Hormel denied spam copyright

EU court rejects trademark dispute.
EU court rejects trademark dispute.Hormel Foods, maker of the SPAM pressed meat product, has lost a case brought before the European 'Office for Harmonization of Internal Markets'… https://www.virusbulletin.com/blog/2006/10/hormel-denied-spam-copyright/

Stration worm building steadily

Mass-mailer evolving as botnets spread.
Mass-mailer evolving as botnets spread. The Stration mass-mailing worm, also called Warezov by some vendors, has been spreading steadily over the last few weeks, with the creators… https://www.virusbulletin.com/blog/2006/10/stration-worm-building-steadily/

Tesco to sell budget AV product

UK supermarket giant enters software market.
UK supermarket giant enters software market. The UK's largest supermarket chain, Tesco, has announced plans to sell and support its own-brand range of low-budget software products,… https://www.virusbulletin.com/blog/2006/10/tesco-sell-budget-av-product/

Trend, McAfee vulnerabilities disclosed

ActiveX and ePO flaws covered by patches.
ActiveX and ePO flaws covered by patches.Trend Micro's flagship OfficeScan Corporate Edition 7.3 has suffered a vulnerability, allowing code execution from the local network. The… https://www.virusbulletin.com/blog/2006/10/trend-mcafee-vulnerabilities-disclosed/

McAfee joins Vista battle

Newspaper ad attacks Microsoft plans.
Newspaper ad attacks Microsoft plans.McAfee has joined Symantec on the warpath against Microsoft's plans for its forthcoming Vista release of Windows. In a full-page advertisement… https://www.virusbulletin.com/blog/2006/10/mcafee-joins-vista-battle/

Gmail slashes spam FPs

Hotmail lagging behind on mislabelled ham.
Hotmail lagging behind on mislabelled ham. 'Email marketing' firm Lyris has released a study of spam false positive filtering, showing a general downward trend in falsely blocked… https://www.virusbulletin.com/blog/2006/10/gmail-slashes-spam-fps/

Web community fights phishing

Vote-based anti-phish system launched.
Vote-based anti-phish system launched. A new database of phishing sites has been launched, with an open-source, community focus. The system, labelled PhishTank, is run by web firm… https://www.virusbulletin.com/blog/2006/10/web-community-fights-phishing/

IE punctured yet again

Newly patched browser vulnerable to more malware.
Newly patched browser vulnerable to more malware.Microsoft's beleaguered Internet Explorer browser is once again the subject of security worries, as another fully functioning… https://www.virusbulletin.com/blog/2006/10/ie-punctured-yet-again/

NCSA launches security month

Watchdog kicks off awareness offensive.
Watchdog kicks off awareness offensive. US online safety organisation the National Cyber Security Alliance (NCSA) has launched its latest public information campaign, labelling… https://www.virusbulletin.com/blog/2006/10/ncsa-launches-security-month/

More spammers nabbed by Earthlink

ISP helps FBI track down spamming duo.
ISP helps FBI track down spamming duo. Two men pleaded guilty to spamming in a Miami court last week. The pair were accused of sending over 25,000 emails over a period of a month… https://www.virusbulletin.com/blog/2006/10/more-spammers-nabbed-earthlink/

October issue of VB published

The October issue of Virus Bulletin is now available for subscribers to download.
The October issue of Virus Bulletin is now available for subscribers to download. The October 2006 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2006/10/october-issue-vb-published/

Phishers indicted

Six men charged with masterminding a phishing operation.
Six men charged with masterminding a phishing operation. Six US men have been indicted on charges of masterminding a phishing operation. According to the indictment, the six men… https://www.virusbulletin.com/blog/2006/10/phishers-indicted/

News round-up

September's goings on in the AV industry.
September's goings on in the AV industry. The top news stories of September were undoubtedly those concerning the VML vulnerability in Microsoft's Internet Explorer. Not only was… https://www.virusbulletin.com/blog/2006/10/news-round/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/10/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.