VB Blog

Paper: API-EPO

Posted by   Virus Bulletin on   Jul 14, 2014

Raul Alvarez studies the unique EPO methodology used by the W32/Daum file infector.

Read more  

Paper: Not old enough to be forgotten: the new chic of Visual Basic 6

Posted by   Virus Bulletin on   Jul 10, 2014

Marion Marschalek looks at two Miuref binaries: one packed with Visual Basic 6 and one with C++.

Read more  

Paper: VBA is not dead!

Posted by   Virus Bulletin on   Jul 7, 2014

Gabor Szappanos looks at the resurgence of malicious VBA macros that use social engineering to activate.

Read more  

'Cyber attack on hedge fund' turns out to be internal 'scenario' used by BAE Systems

Posted by   Virus Bulletin on   Jul 3, 2014

Story that appeared to be taken from fiction turns out... to have been fiction.

Read more  

Paper: Obfuscation in Android malware, and how to fight back

Posted by   Virus Bulletin on   Jul 2, 2014

Axelle Apvrille and Ruchna Nigam look at both off-the-shelf products and custom obfuscation techniques.

Read more  

Virus Bulletin celebrates 25th birthday by making all content free

Posted by   Virus Bulletin on   Jul 1, 2014

Neither subscription nor registration required to access content.

Read more  

Exploit kit requires link to be clicked before redirection

Posted by   Virus Bulletin on   Jun 23, 2014

Automatic analysis of malicious payloads becomes a little bit harder again.

Read more  

Cheap Android phone comes shipped with spyware

Posted by   Virus Bulletin on   Jun 19, 2014

Trojan masquerades as Google Play app; cannot be removed.

Read more  

Virus Bulletin seeks security researchers

Posted by   Virus Bulletin on   Jun 17, 2014

Would you like to publish your research through Virus Bulletin - or perhaps even work for us?

Read more  

Game over for GameOver Zeus botnet?

Posted by   Virus Bulletin on   Jun 5, 2014

Coordinated effort against gang that's also behind CryptoLocker ransomware.

Read more  

Search blog

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2011/09/

September issue of VB published

The September issue of Virus Bulletin is now available for subscribers to download.
The September issue of Virus Bulletin is now available for subscribers to download. The September 2011 issue of Virus Bulletin is now available for subscribers to browse online… https://www.virusbulletin.com/blog/2011/09/september-issue-vb-published/

Researchers find email used in RSA hack

Email with malicious attachment uploaded to online scanning service
Email with malicious attachment uploaded to online scanning service Researchers at F-Secure have managed to obtain the file used in the targeted attack against security vendor RSA… https://www.virusbulletin.com/blog/2011/08/researchers-find-email-used-rsa-hack/

Explosive growth of malicious spam

Spam filters less likely to block current malware campaigns.
Spam filters less likely to block current malware campaigns. While several reports show that the global levels of spam have seen a steady decline over the past year, this month has… https://www.virusbulletin.com/blog/2011/08/explosive-growth-malicious-spam/

Spam sent via fake out-of-office messages

'Sick leave' message followed by weight loss spam.
'Sick leave' message followed by weight loss spam. In an apparently new way of spreading their messages, spammers are advertising their products via fake out-of-office replies.… https://www.virusbulletin.com/blog/2011/08/spam-sent-fake-out-office-messages/

Fake codec trojan disables anti-virus software

Victim tricked into believing security software still active.
Victim tricked into believing security software still active. A new trojan, discovered by researchers at ESET, spreads itself via fake codecs, then disables running anti-virus… https://www.virusbulletin.com/blog/2011/08/fake-codec-trojan-disables-anti-virus-software/

Banking malware tells user to 'refund' money

Web injection used to suggest accidental transfer.
Web injection used to suggest accidental transfer. In a new twist to banking trojans, a piece of malware found on German computers tricks victims into believing a large amount has… https://www.virusbulletin.com/blog/2011/08/banking-malware-tells-user-refund-money/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2011/08/

August issue of VB published

The August issue of Virus Bulletin is now available for subscribers to download.
The August issue of Virus Bulletin is now available for subscribers to download. The August 2011 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2011/08/august-issue-vb-published/

AV-Test.org unveils latest certifications

Q2 test results covering 22 products released.
Q2 test results covering 22 products released. Independent testing body AV-Test.org has released the results of its latest round of testing, putting 22 of the latest security… https://www.virusbulletin.com/blog/2011/07/av-test-org-unveils-latest-certifications/

Rogue Twitter application steals passwords

'See who stalks my Twitter' used to lure users.
'See who stalks my Twitter' used to lure users. A malicious Twitter application is currently spreading on the microblogging network, luring users to hand over their passwords,… https://www.virusbulletin.com/blog/2011/07/rogue-twitter-application-steals-passwords/

Trojan uses remote user account to control compromised machine

Malware targets customers of Brazilian banks.
Malware targets customers of Brazilian banks. Researchers at Kaspersky have discovered a piece of malware aimed at customers of Brazilian banks which creates a remote user account… https://www.virusbulletin.com/blog/2011/07/trojan-uses-remote-user-account-control-compromised-machine/

Hotmail beefs up security with stricter password policy

'My friend has been spammed' button also welcomed by experts.
'My friend has been spammed' button also welcomed by experts.Microsoft's free webmail service Hotmail has introduced some new features which should make it less likely for its… https://www.virusbulletin.com/blog/2011/07/hotmail-beefs-security-stricter-password-policy/

Latest VBSpam certification results published

Latest VBSpam results published - full report now also available.
Latest VBSpam results published - full report now also available. The results of the July VBSpam comparative review have been announced. The 14th VBSpam test showed both a number… https://www.virusbulletin.com/blog/2011/07/latest-vbspam-certification-results-published/

Zitmo trojan for Android defeats two-factor authentication

Malware intercepts TANs sent via SMS.
Malware intercepts TANs sent via SMS. A new variant of the Zitmo trojan has been discovered that infects mobile devices running the Android platform and which intercepts SMS… https://www.virusbulletin.com/blog/2011/07/zitmo-trojan-android-defeats-two-factor-authentication/

Google delists all .co.cc domains from its index

Large fraction of sites deemed 'spammy or low-quality'.
Large fraction of sites deemed 'spammy or low-quality'.Google has removed all sites running on subdomains of .co.cc from its search engine index as the company believes too large a… https://www.virusbulletin.com/blog/2011/07/google-delists-all-co-cc-domains-its-index/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2011/07/

July issue of VB published

The July issue of Virus Bulletin is now available for subscribers to download.
The July issue of Virus Bulletin is now available for subscribers to download. The July 2011 issue of Virus Bulletin is now available for subscribers to browse online or download… https://www.virusbulletin.com/blog/2011/07/july-issue-vb-published/

Spammers using social network templates

Templates from social networking sites used to make messages appear legitimate.
Templates from social networking sites used to make messages appear legitimate. According to Symantec, spammers are increasingly using templates from social networking sites to… https://www.virusbulletin.com/blog/2011/06/spammers-using-social-network-templates/

International co-operation leads to scareware arrests

ChronoPay co-founder arrested for DDoS attacks on rivals.
ChronoPay co-founder arrested for DDoS attacks on rivals. Last week, Russian authorities arrested Pavel Vrublevsky, co-founder of ChronoPay, Russia's largest processor of online… https://www.virusbulletin.com/blog/2011/06/international-co-operation-leads-scareware-arrests/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.