VB Blog

VB2014 preview: Apple without a shell - iOS under targeted attack

Posted by   Virus Bulletin on   Sep 12, 2014

FireEye researchers show a large attack vector for Apple's mobile operating system.

Read more  

Left-to-right override makes a return in spam

Posted by   Virus Bulletin on   Sep 11, 2014

Trick shows that spammers still try to beat content-based filters.

Read more  

Paper: Prosecting the Citadel botnet - revealing the dominance of the Zeus descendent: part two

Posted by   Virus Bulletin on   Sep 11, 2014

Aditya K. Sood and Rohit Bansal study the malware's behaviour when ran on a physical machine.

Read more  

Crypto blunder makes TorrentLocker easy to crack

Posted by   Virus Bulletin on   Sep 10, 2014

Use of single XOR key leaves ransomware open to known-plaintext attack.

Read more  

VB2014 preview: The three levels of exploit testing

Posted by   Virus Bulletin on   Sep 9, 2014

Richard Ford and Marco Carvalho present an idea for how to test products that claim to detect the unknown.

Read more  

VB2014 preview: last-minute papers added to the programme

Posted by   Virus Bulletin on   Sep 5, 2014

Hot topics to be covered at VB2014 conference in Seattle.

Read more  

Paper: Prosecting the Citadel botnet - revealing the dominance of the Zeus descendent: part one

Posted by   Virus Bulletin on   Sep 3, 2014

Aditya K. Sood and Rohit Bansal dissect botnet primarily used for financial fraud.

Read more  

VB2014 preview: Swipe away, we're watching you

Posted by   Virus Bulletin on   Sep 2, 2014

Hong Kei Chan and Liang Huang describe the various aspects and the evolution of point-of-sale malware.

Read more  

VB2014 preview: Design to discover: security analytics with 3D visualization engine

Posted by   Virus Bulletin on   Aug 29, 2014

Thibault Reuille and Dhia Mahjoub use particle physics to shows clusters of malicious domains.

Read more  

Srizbi kernel-mode spambot reappears as Pitou

Posted by   Virus Bulletin on   Aug 28, 2014

Malware possibly still in the 'brewing' stage.

Read more  

Search blog

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2008/08/

McAfee buys data loss firm Reconnex

$46 million acquisition announced as strong profit report released.
$46 million acquisition announced as strong profit report released.McAfee has announced its official agreement to purchase privately owned data loss prevention firm Reconnex, in a… https://www.virusbulletin.com/blog/2008/08/mcafee-buys-data-loss-firm-reconnex/

Sophos makes move to buy Utimaco

€217 million bid launched for encryption specialist.
€217 million bid launched for encryption specialist. Security light-heavyweight Sophos has issued official notice of its intention to buy German encryption firm Utimaco, in a share… https://www.virusbulletin.com/blog/2008/07/sophos-makes-move-buy-utimaco/

Patch Tuesday sees serious DNS flaws fixed

Nothing marked critical, but some very important patches issued.
Nothing marked critical, but some very important patches issued.Microsoft's latest 'Patch Tuesday' round of security updates for once contains no bulletins marked as 'critical',… https://www.virusbulletin.com/blog/2008/07/patch-tuesday-sees-serious-dns-flaws-fixed/

Storm mails bring spoof World War 3 news

US-Iran war story used as hook for malware barrage.
US-Iran war story used as hook for malware barrage. The Storm botnet has been spamming in force again in the past week, with its expected run targeting 4th of July celebrations in… https://www.virusbulletin.com/blog/2008/07/storm-mails-bring-spoof-world-war-3-news/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2008/07/

July issue of VB published

The July issue of Virus Bulletin is now available for subscribers to download.
The July issue of Virus Bulletin is now available for subscribers to download. The July 2008 issue of Virus Bulletin is now available for subscribers to browse online or download… https://www.virusbulletin.com/blog/2008/07/july-issue-vb-published/

China hosting over half of malicious sites

StopBadware.org report highlights Chinese dominance in web malware.
StopBadware.org report highlights Chinese dominance in web malware. A report from StopBadware.org released last week found that 52% of malicious websites were hosted in China, with… https://www.virusbulletin.com/blog/2008/06/china-hosting-over-half-malicious-sites/

MAAWG unveils spam and botnet battling policies

Working group of ISPs and net operators issue traffic calming guidelines.
Working group of ISPs and net operators issue traffic calming guidelines. Global collaboration body the Messaging Anti-Abuse Working Group (MAAWG) has ratified a set of guidelines… https://www.virusbulletin.com/blog/2008/06/maawg-unveils-spam-and-botnet-battling-policies/

Macs under attack from trojan double whammy

Two new threats in a week spark worries of approaching Mac malware era.
Two new threats in a week spark worries of approaching Mac malware era. Users of Apple Mac systems, who have so far only suffered from minimal attention from malware creators, may… https://www.virusbulletin.com/blog/2008/06/macs-under-attack-trojan-double-whammy/

LinkScanner could be behind surge in web traffic

Traffic analysts worry as AVG implements web scanning technology.
Traffic analysts worry as AVG implements web scanning technology.AVG's LinkScanner technology, added to its portfolio after the acquisition of Exploit Prevention Labs last… https://www.virusbulletin.com/blog/2008/06/linkscanner-could-be-behind-surge-web-traffic/

Yet more data leaks in UK public services

Confidential health service info exposed after theft.
Confidential health service info exposed after theft. Despite a wealth of recent incidents of data loss from various areas of the UK's public services, including data sent… https://www.virusbulletin.com/blog/2008/06/yet-more-data-leaks-uk-public-services/

Trojan-to-worm automation tool spotted

GUI gizmo adds extra spreading menace to any malware.
GUI gizmo adds extra spreading menace to any malware. Researchers at Panda have discovered a simple and colourful graphical application designed to add basic worm techniques to… https://www.virusbulletin.com/blog/2008/06/trojan-worm-automation-tool-spotted/

Spyware gang sneaks millions from SA government

32 arrested but South Africa theft scam thought to be ongoing.
32 arrested but South Africa theft scam thought to be ongoing. An orchestrated series of spyware infiltrations has netted scammers over £12.8 million ($24.7 million) from the South… https://www.virusbulletin.com/blog/2008/06/spyware-gang-sneaks-millions-sa-government/

41 months plus hefty fine for botherder

Cross-border operation brings adware crook to book.
Cross-border operation brings adware crook to book. A Florida man has been sentenced to 41 months in prison and fined $65,000 (approx. £32,000) after implanting bot software on… https://www.virusbulletin.com/blog/2008/06/41-months-plus-hefty-fine-botherder/

Microsoft releases latest Patch Tuesday fixes

7 vulnerabilities, 3 critical, addressed in June security update.
7 vulnerabilities, 3 critical, addressed in June security update.Microsoft has issued its monthly 'Patch Tuesday' set of security fixes, with seven separate areas covered of which… https://www.virusbulletin.com/blog/2008/06/microsoft-releases-latest-patch-tuesday-fixes/

File encryption blackmail scam returns

Kaspersky warns of new and nasty data-ransom trojan.
Kaspersky warns of new and nasty data-ransom trojan. Malware analysts at Kaspersky Lab have warned of the return of the 'Gpcoder' trojan, a nasty piece of 'ransomware' which… https://www.virusbulletin.com/blog/2008/06/file-encryption-blackmail-scam-returns/

Sourcefire turns down $186 million takeover bid

Unsolicited offer from Barracuda Networks rejected.
Unsolicited offer from Barracuda Networks rejected.Sourcefire, the open source specialists behind the popular Snort intrusion prevention system and backer of the ClamAV open-source… https://www.virusbulletin.com/blog/2008/06/sourcefire-turns-down-186-million-takeover-bid/

Microsoft increases pressure on Apple to fix Safari blended threat

'Carpet bombing' vulnerability more serious than Apple claims, MS warns.
'Carpet bombing' vulnerability more serious than Apple claims, MS warns.Microsoft, whose Internet Explorer has come under frequent criticism for security vulnerabilities, has… https://www.virusbulletin.com/blog/2008/06/microsoft-increases-pressure-apple-fix-safari-blended-threat/

Spam and ID theft attacked from all sides

EU body issues warning, ICANN, Japan and Yahoo! take on spammers and phishers.
EU body issues warning, ICANN, Japan and Yahoo! take on spammers and phishers. Last week a series of major institutions took action highlighting the threat of spam and phishing,… https://www.virusbulletin.com/blog/2008/06/spam-and-id-theft-attacked-all-sides/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.