VB Blog

Out-of-band patch released for all Windows versions

Posted by   Virus Bulletin on   Nov 19, 2014

Kerberos bug means one set of credentials suffices to rule them all.

Read more  

VB2014 paper: Optimized mal-ops. Hack the ad network like a boss

Posted by   Virus Bulletin on   Nov 18, 2014

Why buying ad space makes perfect sense for those wanting to spread malware.

Read more  

Book review: Bulletproof SSL and TLS

Posted by   Virus Bulletin on   Nov 17, 2014

Must-read for anyone working with one of the Internet's most important protocols.

Read more  

VB2014 paper: Bootkits: past, present & future

Posted by   Virus Bulletin on   Nov 12, 2014

Despite better defences, the era of bootkits is certainly not behind us.

Read more  

Stuxnet infected Natanz plant via carefully selected targets rather than escape from it

Posted by   Virus Bulletin on   Nov 11, 2014

Five initial victims of infamous worm named.

Read more  

VB2014 paper: Apple without a shell - iOS under targeted attack

Posted by   Virus Bulletin on   Nov 10, 2014

Developer Enterprise Program recently found to be used by WireLurker.

Read more  

Macro malware on the rise again

Posted by   Virus Bulletin on   Nov 7, 2014

Users taught that having to enable enhanced security features is no big deal.

Read more  

VB2014 video: Attack points in health apps & wearable devices - how safe is your quantified self?

Posted by   Virus Bulletin on   Nov 7, 2014

Health apps and wearable devices found to make many basic security mistakes.

Read more  

WireLurker malware infects iOS devices through OS X

Posted by   Virus Bulletin on   Nov 6, 2014

Non-jailbroken devices infected via enterprise provisioning program.

Read more  

VB2014 paper: DMARC - how to use it to improve your email reputation

Posted by   Virus Bulletin on   Nov 6, 2014

Terry Zink presents case study in which he describes setting a DMARC policy for Microsoft.

Read more  

Search blog

MS sues UK spammer

Civil action avoids spam law technicalities.
Civil action avoids spam law technicalities.Microsoft has sued and reached an out-of-court settlement with UK spammer Paul Fox, after apparently despairing of finding any success… https://www.virusbulletin.com/blog/2006/09/ms-sues-uk-spammer/

Subliminal message hidden in spam

Mail campaign aims to sneak into readers' subconscious minds.
Mail campaign aims to sneak into readers' subconscious minds. A spam campaign is using the classic 'submliminal message' technique in an attempt to implant thoughts in the minds of… https://www.virusbulletin.com/blog/2006/09/subliminal-message-hidden-spam/

Nine years for spam felon

Tough sentence upheld despite free-speech claims.
Tough sentence upheld despite free-speech claims. A US man convicted two years ago under the state of Virginia's anti-spam laws has lost an appeal against his conviction. The case,… https://www.virusbulletin.com/blog/2006/09/nine-years-spam-felon/

Word zero-day exploited

Trojan uses unpatched hole in office software.
Trojan uses unpatched hole in office software. At least one trojan has been seen in the wild exploiting a newly discovered vulnerability in Microsoft's Word 2000 software. The… https://www.virusbulletin.com/blog/2006/09/word-zero-day-exploited/

Phishing on the rise

One in three malicious emails a phish, says MessageLabs.
One in three malicious emails a phish, says MessageLabs. A report on the current state of digital security has revealed that phishing scams constitute a growing danger to computer… https://www.virusbulletin.com/blog/2006/09/phishing-rise/

Gromozon mystery clearing

Cleaner tool aims to remove sophisticated attack.
Cleaner tool aims to remove sophisticated attack. The shadowy blended threat known as Gromozon has slowly been gaining notoriety in recent weeks, particularly after some in-depth… https://www.virusbulletin.com/blog/2006/09/gromozon-mystery-clearing/

Mobile snoopware labelled spyware

Future phone privacy threatened.
Future phone privacy threatened. Reports this week highlighted the problem of spyware running on mobile phones, and the consequences this could have for privacy. A commercial… https://www.virusbulletin.com/blog/2006/09/mobile-snoopware-labelled-spyware/

New New Zealand spam laws to allow spam

Adjustments to laws may let 'non-commercial' spam continue.
Adjustments to laws may let 'non-commercial' spam continue. Recommendations have been made to dilute tough new anti-spam laws currently being debated by the New Zealand government.… https://www.virusbulletin.com/blog/2006/09/new-new-zealand-spam-laws-allow-spam/

CA in Windows FP

eTrust identifies critical file as virus.
eTrust identifies critical file as virus. A mistake at CA caused some trouble over the weekend, as its eTrust products started identifying part of the Windows local authentication… https://www.virusbulletin.com/blog/2006/09/ca-windows-fp/

AT&T hack led to spearphish

Stolen details used to trick victims out of further info.
Stolen details used to trick victims out of further info. Transaction details stolen as part of last weekend's security breach of a shopping site run by US phone giant AT&T were… https://www.virusbulletin.com/blog/2006/09/amp-t-hack-led-spearphish/

A fine, a curfew and a treasure hunt

Round up of the month's spammer penalties.
Round up of the month's spammer penalties. Kicking off a round-up of some of the anti-spam penalties issued worldwide this month, the Chinese government has made an underwhelming… https://www.virusbulletin.com/blog/2006/09/fine-curfew-and-treasure-hunt/

September issue of VB published

The September issue of Virus Bulletin is now available for subscribers to download.
The September issue of Virus Bulletin is now available for subscribers to download. The September 2006 issue of Virus Bulletin is now available for subscribers to browse online… https://www.virusbulletin.com/blog/2006/09/september-issue-vb-published/

Spot that spammer

Quiz tests consumers' ability to identify spam causing sites.
Quiz tests consumers' ability to identify spam causing sites. Last month, McAfee invited web users to spot the undesirable website, in an eight-question quiz entitled: 'Can you… https://www.virusbulletin.com/blog/2006/09/spot-spammer/

Nearly VB 100%

Near misses.
Near misses. In the recent Windows XP comparative review (see VB, June 2006, p.11), VB reported that VirusBuster failed to achieve the results required for a VB 100% award. After… https://www.virusbulletin.com/blog/2006/09/nearly-vb-100/

Testing patience

Consumer Reports does it again.
Consumer Reports does it again. After having come in for a great deal of criticism in recent weeks over its AV testing methodology (see VB, September 2006, p.2), Consumer Reports… https://www.virusbulletin.com/blog/2006/09/testing-patience/

Worm spreads via mobiles. Maybe.

PC malware thought capable of using phones as vector.
PC malware thought capable of using phones as vector.F-Secure has reported a new worm which attempts to spread via mobile phones. The 'Mobler' worm, once activated, copies itself… https://www.virusbulletin.com/blog/2006/09/worm-spreads-mobiles-maybe/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/09/

Future browsers battle phishing

Microsoft and Mozilla's upcoming new versions to include safety measures.
Microsoft and Mozilla's upcoming new versions to include safety measures. Pre-release versions of both Mozilla FireFox 2 and Microsoft Internet Explorer 7 have been unveiled,… https://www.virusbulletin.com/blog/2006/09/future-browsers-battle-phishing/

More MS06-040 worries

Vulnerability still causing problems.
Vulnerability still causing problems. There have been further reports of malware spreading using the MS06-040 vulnerability, announced and patched three weeks ago on Microsoft's… https://www.virusbulletin.com/blog/2006/09/more-ms06-040-worries/

Corporate mail spam drops Haxdoor

Business-related message carries trojan.
Business-related message carries trojan. A vaguely official-sounding email is being widely spammed, claiming to relate to some nebulous business activity between the sender and… https://www.virusbulletin.com/blog/2006/08/corporate-mail-spam-drops-haxdoor/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.