VB Blog

VB2019 presentation: A deep dive into iPhone exploit chains

Posted by   Virus Bulletin on   Jan 10, 2020

In a last-minute presentation at VB2019 in London, John Bambenek of the University of Illinois at Urbana-Champaign discussed details of campaigns that used advanced iOS and Android exploit chains against China’s Uighur minority. Today we release the recording of John's presentation.

Read more  

Latest VBWeb report describes current state of the web-based threat landscape

Posted by   Helen Martin on   Jan 8, 2020

Today we released the Winter 2020 VBWeb report, detailing the performance of web security products against live web threats and looking at the current state of the web-based threat landscape.

Read more  

VB2019 paper: Catch me if you can: detection of injection exploitation by validating query and API integrity

Posted by   Virus Bulletin on   Jan 6, 2020

In a paper presented at VB2019 in London, Prismo Systems researchers Abhishek Singh and Ramesh Mani discussed code injection vulnerabilities and presented a tool that could detect this vulnerability class. Today we publish their paper and the recording of their presentation.

Read more  

Virus Bulletin says a fond farewell and thank you to Martijn Grooten

Posted by   Helen Martin on   Dec 31, 2019

As VB Editor Martijn Grooten steps down from his role to move on to new challenges, the team wish him a fond farewell and the very best of luck in his future endeavours.

Read more  

VB2019 paper: Never before had Stierlitz been so close to failure (or: what is a Soviet super-spy doing in a popular bundleware for Mac?)

Posted by   Martijn Grooten on   Dec 27, 2019

Today, we publish the VB2019 paper and video by Sophos researcher Sergei Shevchenko in which he analyses a popular yet unnamed piece of macOS ‘bundleware’.

Read more  

Parting thoughts 5: bringing the good news

Posted by   Martijn Grooten on   Dec 23, 2019

In the final of a five-part series of blog posts, departing VB Editor Martijn Grooten argues for more emphasis on the good news in security, especially that which is more subtle.

Read more  

Parting thoughts 4: the big picture

Posted by   Virus Bulletin on   Dec 20, 2019

In the fourth of a five-part series of blog posts, departing VB Editor Martijn Grooten explains why security researchers should refer to other people's work.

Read more  

Parting thoughts 3: taking security seriously

Posted by   Martijn Grooten on   Dec 19, 2019

In the third of a five-part series of blog posts, departing VB Editor Martijn Grooten explains why he believes security vendors should take their products' security more seriously.

Read more  

VB2019 paper: Exploring the Chinese DDoS landscape

Posted by   Martijn Grooten on   Dec 19, 2019

China has long been a hotbed of DDoS activities, and today we publish a VB2019 paper by Intezer researcher Nacho Sanmillan who looked at Chinese threat groups engaged in performing DDoS attacks. We have also uploaded the recording of his presentation.

Read more  

Parting thoughts 2: the need for education in security

Posted by   Martijn Grooten on   Dec 18, 2019

In the second of a five-part series of blog posts, departing VB Editor Martijn Grooten explains why he believes cybersecurity professionals need to educate themselves on the complexities of the real-world situations in which security is applied.

Read more  

Search blog

Corporate mail spam drops Haxdoor

Business-related message carries trojan.
Business-related message carries trojan. A vaguely official-sounding email is being widely spammed, claiming to relate to some nebulous business activity between the sender and… https://www.virusbulletin.com/blog/2006/08/corporate-mail-spam-drops-haxdoor/

Phone companies' security shaken

As T-Mobile hacker is convicted, AT&T reveals break-in.
As T-Mobile hacker is convicted, AT&T reveals break-in. A 23-year-old Oregon resident has been sentenced to a year of 'home detention', after being convicted of hacking into the… https://www.virusbulletin.com/blog/2006/08/phone-companies-security-shaken/

BitDefender to join mobile market

AV firm releases phone security beta.
AV firm releases phone security beta.BitDefender has become the latest AV company to make a move into the mobile device market. It has released a beta of its mobile AV software,… https://www.virusbulletin.com/blog/2006/08/bitdefender-join-mobile-market/

AOL 9.0 slated for suspect tactics

More badware accusations levelled at web giant.
More badware accusations levelled at web giant.StopBadware.org, the international anti-malware coalition backed by Google and Sun among others, has labelled AOL's current free… https://www.virusbulletin.com/blog/2006/08/aol-9-0-slated-suspect-tactics/

More ConsumerReports complaints

Testing organisation's methodology slammed again.
Testing organisation's methodology slammed again.ConsumerReports.org, the online wing of American consumers association Consumers Union, is once again taking flak for its testing… https://www.virusbulletin.com/blog/2006/08/more-consumerreports-complaints/

iPod spam carries trojan

Fake sales invoice includes downloader.
Fake sales invoice includes downloader. A new spam campaign claiming to be information on an order for a new iPod is accompanied by a trojan which, when run, attempts to download… https://www.virusbulletin.com/blog/2006/08/ipod-spam-carries-trojan/

IBM invests in security, others may follow

Big Blue purchase sparks rumours of more mergers.
Big Blue purchase sparks rumours of more mergers. When massive cross-sector IT giant IBM bought Internet Security Systems for a rumoured $1.3 billion last week, it joined the list… https://www.virusbulletin.com/blog/2006/08/ibm-invests-security-others-may-follow/

Share dealers robbed, phishing suspected

Canadian stock-trading association warns of security breaches.
Canadian stock-trading association warns of security breaches. The Investment Dealers Association of Canada (IDA), a national regulatory organisation, has released an urgent press… https://www.virusbulletin.com/blog/2006/08/share-dealers-robbed-phishing-suspected/

Malware mostly crime-related, says Panda

Security firm reports 88% of new malware linked to cyber crime.
Security firm reports 88% of new malware linked to cyber crime. The labs of Spanish firm Panda Software have released a quarterly report, stating that criminal activity is behind… https://www.virusbulletin.com/blog/2006/08/malware-mostly-crime-related-says-panda/

Three years for botnet master

Zombie herder sentenced to 37 months behind bars.
Zombie herder sentenced to 37 months behind bars. A Californian 21-year-old has been sent to a federal prison in the US, after being convicted of computer fraud and computer damage… https://www.virusbulletin.com/blog/2006/08/three-years-botnet-master/

Rooting out malware

Sophos joins anti-rootkit market, others expected to follow soon.
Sophos joins anti-rootkit market, others expected to follow soon.Sophos has released a free anti-rootkit tool, available for download from its website. The UK-based company joins… https://www.virusbulletin.com/blog/2006/08/rooting-out-malware/

Child porn blackmail spam carries trojan

Spoof mail claims to come from anti-child porn site.
Spoof mail claims to come from anti-child porn site. A spam campaign claiming to come from child porn activists ASACP accuses recipients of visiting child porn sites, suggesting a… https://www.virusbulletin.com/blog/2006/08/child-porn-blackmail-spam-carries-trojan/

Phishing help for Yahoo! users

As phishing nets spread wider, Yahoo! announces defensive 'seal'.
As phishing nets spread wider, Yahoo! announces defensive 'seal'. Web giant Yahoo! has announced plans to introduce a new anti-phishing system to help protect its customers. The… https://www.virusbulletin.com/blog/2006/08/phishing-help-yahoo-users/

Trend and Microsoft deny vulnerability

PowerPoint zero-day hype just hype after all.
PowerPoint zero-day hype just hype after all. After an announcement from Trend Micro sparked numerous reports of a zero-day PowerPoint exploit, taking advantage of an… https://www.virusbulletin.com/blog/2006/08/trend-and-microsoft-deny-vulnerability/

Stock scam spam duo sued

Pump-and-dump couple face fines, as do many others worldwide.
Pump-and-dump couple face fines, as do many others worldwide. A Connecticut couple have been indicted over claims they used a spam campaign to artificially inflate stock prices. In… https://www.virusbulletin.com/blog/2006/08/stock-scam-spam-duo-sued/

AOL AV in adware alarm

Free product offered by AOL accused of potentially unwanted tactics.
Free product offered by AOL accused of potentially unwanted tactics. Recently released Active Virus Shield, the Kaspersky-based anti-virus product from web giant AOL, is coming… https://www.virusbulletin.com/blog/2006/08/aol-av-adware-alarm/

McAfee faces legal and financial woes

With books under scrutiny, McAfee is sued over property rights.
With books under scrutiny, McAfee is sued over property rights. As McAfee faces up to the likelihood of its financial results for the last five years being overturned following… https://www.virusbulletin.com/blog/2006/08/mcafee-faces-legal-and-financial-woes/

Phishers target more charities

Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted.
Christian Aid warns supporters of bogus emails, while Katrina phishmaster is indicted. Church charity organisation Christian Aid has released a statement warning supporters to be… https://www.virusbulletin.com/blog/2006/08/phishers-target-more-charities/

Movie firm harasses users with spyware

Film download service accused of using spyware strongarm tactics.
Film download service accused of using spyware strongarm tactics. Washington state has brought an action against a firm called Movieland.com, after complaints that the company's… https://www.virusbulletin.com/blog/2006/08/movie-firm-harasses-users-spyware/

AOL digging for spammer's treasure

Web giant plans hunt for hidden spam gold.
Web giant plans hunt for hidden spam gold. ISP mammoth AOL has obtained a court judgement allowing it to dig up the land of a convicted spammer's family, in a search for a stash… https://www.virusbulletin.com/blog/2006/08/aol-digging-spammer-s-treasure/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.