VB Blog

VB2019 paper: Fantastic Information and Where to Find it: A guidebook to open-source OT reconnaissance

Posted by   Martijn Grooten on   Nov 22, 2019

A VB2019 paper by FireEye researcher Daniel Kapellmann Zafra explained how open source intelligence (OSINT) can be used to learn crucial details of the inner workings of many a system. Today we publish Daniel's paper and the recording of his presentation.

Read more  

VB2019 paper: Different ways to cook a crab: GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Posted by   Martijn Grooten on   Nov 21, 2019

Though active for not much longer than a year, GandCrab had been one of the most successful ransomware operations. In a paper presented at VB2019 in London, McAfee researchers John Fokker and Alexandre Mundo looked at the malware code, its evolution and the affiliate scheme behind it. Today we publish both their paper and the recording of their presentation.

Read more  

VB2019 paper: Domestic Kitten: an Iranian surveillance program

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, Check Point researchers Aseel Kayal and Lotem Finkelstein presented a paper detailing an Iranian operation they named 'Domestic Kitten' that used Android apps for targeted surveillance. Today we publish their paper and the video of their presentation.

Read more  

VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

Posted by   Martijn Grooten on   Nov 18, 2019

At VB2019 in London, LINE's HeungSoo Kang explained how cryptocurrency exchanges had been attacked using Firefox zero-days. Today, we publish the video of his presentation.

Read more  

VB2019 paper: DNS on fire

Posted by   Martijn Grooten on   Nov 7, 2019

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

Read more  

German Dridex spam campaign is unfashionably large

Posted by   Martijn Grooten on   Nov 6, 2019

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Read more  

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

Posted by   Martijn Grooten on   Nov 5, 2019

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Read more  

Emotet continues to bypass many email security products

Posted by   Martijn Grooten on   Nov 4, 2019

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

Read more  

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Posted by   Martijn Grooten on   Nov 1, 2019

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's presentation.

Read more  

Stalkerware poses particular challenges to anti-virus products

Posted by   Martijn Grooten on   Oct 31, 2019

Malware used in domestic abuse situations is a growing threat, and the standard way for anti-virus products to handle such malware may not be good enough. But that doesn't mean there isn't an important role for anti-virus to play.

Read more  

Search blog

VB2006 a resounding success - VB2007 dates revealed

As another VB conference comes to a close, dates for next year's conference are revealed.
As another VB conference comes to a close, dates for next year's conference are revealed. VB2006, which took place in Montréal last week has been declared a resounding success by… https://www.virusbulletin.com/blog/2006/10/resounding-success-dates-revealed/

Met warns Haxdoor victims

Police notify 2,300 their details have been stolen.
Police notify 2,300 their details have been stolen. London's Metropolitan Police has contacted over 2,300 computer users to inform them that their details have been found on a… https://www.virusbulletin.com/blog/2006/10/met-warns-haxdoor-victims/

Domain name threat to Spamhaus

Anti-spam system at risk of losing identity.
Anti-spam system at risk of losing identity. The recent case in which a US court found anti-spam organisation Spamhaus guilty of mislabelling a company as spammers may take a… https://www.virusbulletin.com/blog/2006/10/domain-name-threat-spamhaus/

McAfee stock scandal claims bosses

CEO leaves, president fired over financial problems.
CEO leaves, president fired over financial problems. Investigations into irregularities in McAfee's finances have led to the resignation of the company CEO and board chairman… https://www.virusbulletin.com/blog/2006/10/mcafee-stock-scandal-claims-bosses/

False false positives

BitDefender defends reputation, three more VB100% awards granted.
BitDefender defends reputation, three more VB100% awards granted. Since the publication of the recent VB100% results, several of the files from the clean test set causing false… https://www.virusbulletin.com/blog/2006/10/false-false-positives/

Hormel denied spam copyright

EU court rejects trademark dispute.
EU court rejects trademark dispute.Hormel Foods, maker of the SPAM pressed meat product, has lost a case brought before the European 'Office for Harmonization of Internal Markets'… https://www.virusbulletin.com/blog/2006/10/hormel-denied-spam-copyright/

Eight years for Russian DoS blackmailers

Extortion gang sentenced for gambling site attacks.
Extortion gang sentenced for gambling site attacks. A team of three found guilty of computer crimes and extortion have been sentenced to eight years imprisonment by a Russian… https://www.virusbulletin.com/blog/2006/10/eight-years-russian-dos-blackmailers/

Tesco to sell budget AV product

UK supermarket giant enters software market.
UK supermarket giant enters software market. The UK's largest supermarket chain, Tesco, has announced plans to sell and support its own-brand range of low-budget software products,… https://www.virusbulletin.com/blog/2006/10/tesco-sell-budget-av-product/

Stration worm building steadily

Mass-mailer evolving as botnets spread.
Mass-mailer evolving as botnets spread. The Stration mass-mailing worm, also called Warezov by some vendors, has been spreading steadily over the last few weeks, with the creators… https://www.virusbulletin.com/blog/2006/10/stration-worm-building-steadily/

Gmail slashes spam FPs

Hotmail lagging behind on mislabelled ham.
Hotmail lagging behind on mislabelled ham. 'Email marketing' firm Lyris has released a study of spam false positive filtering, showing a general downward trend in falsely blocked… https://www.virusbulletin.com/blog/2006/10/gmail-slashes-spam-fps/

Web community fights phishing

Vote-based anti-phish system launched.
Vote-based anti-phish system launched. A new database of phishing sites has been launched, with an open-source, community focus. The system, labelled PhishTank, is run by web firm… https://www.virusbulletin.com/blog/2006/10/web-community-fights-phishing/

Trend, McAfee vulnerabilities disclosed

ActiveX and ePO flaws covered by patches.
ActiveX and ePO flaws covered by patches.Trend Micro's flagship OfficeScan Corporate Edition 7.3 has suffered a vulnerability, allowing code execution from the local network. The… https://www.virusbulletin.com/blog/2006/10/trend-mcafee-vulnerabilities-disclosed/

McAfee joins Vista battle

Newspaper ad attacks Microsoft plans.
Newspaper ad attacks Microsoft plans.McAfee has joined Symantec on the warpath against Microsoft's plans for its forthcoming Vista release of Windows. In a full-page advertisement… https://www.virusbulletin.com/blog/2006/10/mcafee-joins-vista-battle/

More spammers nabbed by Earthlink

ISP helps FBI track down spamming duo.
ISP helps FBI track down spamming duo. Two men pleaded guilty to spamming in a Miami court last week. The pair were accused of sending over 25,000 emails over a period of a month… https://www.virusbulletin.com/blog/2006/10/more-spammers-nabbed-earthlink/

IE punctured yet again

Newly patched browser vulnerable to more malware.
Newly patched browser vulnerable to more malware.Microsoft's beleaguered Internet Explorer browser is once again the subject of security worries, as another fully functioning… https://www.virusbulletin.com/blog/2006/10/ie-punctured-yet-again/

NCSA launches security month

Watchdog kicks off awareness offensive.
Watchdog kicks off awareness offensive. US online safety organisation the National Cyber Security Alliance (NCSA) has launched its latest public information campaign, labelling… https://www.virusbulletin.com/blog/2006/10/ncsa-launches-security-month/

News round-up

September's goings on in the AV industry.
September's goings on in the AV industry. The top news stories of September were undoubtedly those concerning the VML vulnerability in Microsoft's Internet Explorer. Not only was… https://www.virusbulletin.com/blog/2006/10/news-round/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/10/

October issue of VB published

The October issue of Virus Bulletin is now available for subscribers to download.
The October issue of Virus Bulletin is now available for subscribers to download. The October 2006 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2006/10/october-issue-vb-published/

Phishers indicted

Six men charged with masterminding a phishing operation.
Six men charged with masterminding a phishing operation. Six US men have been indicted on charges of masterminding a phishing operation. According to the indictment, the six men… https://www.virusbulletin.com/blog/2006/10/phishers-indicted/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.