VB Blog

Out-of-band patch released for all Windows versions

Posted by   Virus Bulletin on   Nov 19, 2014

Kerberos bug means one set of credentials suffices to rule them all.

Read more  

VB2014 paper: Optimized mal-ops. Hack the ad network like a boss

Posted by   Virus Bulletin on   Nov 18, 2014

Why buying ad space makes perfect sense for those wanting to spread malware.

Read more  

Book review: Bulletproof SSL and TLS

Posted by   Virus Bulletin on   Nov 17, 2014

Must-read for anyone working with one of the Internet's most important protocols.

Read more  

VB2014 paper: Bootkits: past, present & future

Posted by   Virus Bulletin on   Nov 12, 2014

Despite better defences, the era of bootkits is certainly not behind us.

Read more  

Stuxnet infected Natanz plant via carefully selected targets rather than escape from it

Posted by   Virus Bulletin on   Nov 11, 2014

Five initial victims of infamous worm named.

Read more  

VB2014 paper: Apple without a shell - iOS under targeted attack

Posted by   Virus Bulletin on   Nov 10, 2014

Developer Enterprise Program recently found to be used by WireLurker.

Read more  

Macro malware on the rise again

Posted by   Virus Bulletin on   Nov 7, 2014

Users taught that having to enable enhanced security features is no big deal.

Read more  

VB2014 video: Attack points in health apps & wearable devices - how safe is your quantified self?

Posted by   Virus Bulletin on   Nov 7, 2014

Health apps and wearable devices found to make many basic security mistakes.

Read more  

WireLurker malware infects iOS devices through OS X

Posted by   Virus Bulletin on   Nov 6, 2014

Non-jailbroken devices infected via enterprise provisioning program.

Read more  

VB2014 paper: DMARC - how to use it to improve your email reputation

Posted by   Virus Bulletin on   Nov 6, 2014

Terry Zink presents case study in which he describes setting a DMARC policy for Microsoft.

Read more  

Search blog

Symbian worm sighted in the wild

Malware pretends to be media or image file.
Malware pretends to be media or image file. A new worm has been sighted in the wild that operates on the Symbian operating system, which is used on many mobile phones. The worm,… https://www.virusbulletin.com/blog/2008/01/symbian-worm-sighted-wild/

US agencies report vishing, extortion, danger of hacking

FBI name used in email attacks, CIA warns of power supply hacks.
FBI name used in email attacks, CIA warns of power supply hacks. US security and law enforcement agencies were more than usually active in the computer security world last week,… https://www.virusbulletin.com/blog/2008/01/us-agencies-report-vishing-extortion-danger-hacking/

Google links scam Avira users

Suspect firm advertising via Google found to be specialising in hijacking security brands.
Suspect firm advertising via Google found to be specialising in hijacking security brands.Google searches for Avira and the company's anti-malware product Antivir, a free version… https://www.virusbulletin.com/blog/2008/01/google-links-scam-avira-users/

Malcode from Mexico and Africa predicted to boom

Developing world expected to contribute heavily to future cybercrime.
Developing world expected to contribute heavily to future cybercrime. A report from F-Secure has predicted increasing levels of malware creation and operation in 'developing'… https://www.virusbulletin.com/blog/2008/01/malcode-mexico-and-africa-predicted-boom/

Microsoft alert on Excel vulnerability

Targeted exploitation of zero-day flaw seen in wild.
Targeted exploitation of zero-day flaw seen in wild.Microsoft has issued a security advisory on an unresolved vulnerability in its Excel software, which has been reported as a… https://www.virusbulletin.com/blog/2008/01/microsoft-alert-excel-vulnerability/

Help for victims of e-crime

Cybercrime support website launched.
Cybercrime support website launched. A website dedicated to helping victims of online crime and other incidents has been launched in the UK. The site, www.e-victims.org, aims to… https://www.virusbulletin.com/blog/2008/01/help-victims-e-crime/

Stormy love letters

Storm botnet celebrates birthday with new wave of spam.
Storm botnet celebrates birthday with new wave of spam. Earlier this week malware experts warned of likely increased activity of the Storm botnet around Valentine's Day next month.… https://www.virusbulletin.com/blog/2008/01/stormy-love-letters/

Phishing danger increases as Storm botnet is hired out

Smart new trojan and Storm diversification add to online banking risk.
Smart new trojan and Storm diversification add to online banking risk. The dangers of banking online grew significantly in past weeks, as portions of the ever-expanding Storm… https://www.virusbulletin.com/blog/2008/01/phishing-danger-increases-storm-botnet-hired-out/

Rogue anti-malware targets Mac users

Scam expands horizons to draw in new market of victims.
Scam expands horizons to draw in new market of victims. The rogue anti-malware scam, in which fake anti-spyware and anti-virus products are inveigled into victims' machines,… https://www.virusbulletin.com/blog/2008/01/rogue-anti-malware-targets-mac-users/

Spam printing proof-of-concept revealed

Lack of security allows websites to send spammish content to network printers.
Lack of security allows websites to send spammish content to network printers. Opening your inbox on a Monday morning and finding out that it's full of spam is bad enough already,… https://www.virusbulletin.com/blog/2008/01/spam-printing-proof-concept-revealed/

Hundreds of legitimate websites being hacked into

New mass infection leaves security researchers puzzled.
New mass infection leaves security researchers puzzled. Web security company ScanSafe has reported a new mass infection of websites, which it claims accounts for 15% of the web… https://www.virusbulletin.com/blog/2008/01/hundreds-legitimate-websites-being-hacked/

SQL attack hacks wide range of sites

CA among victims of major attack linking sites to malware.
CA among victims of major attack linking sites to malware. Huge numbers of legitimate websites - perhaps as many as 100,000 according to some reports - fell victim to hackers… https://www.virusbulletin.com/blog/2008/01/sql-attack-hacks-wide-range-sites/

Batch of Dutch MP3 players ships with malware

Worm included as unwanted extra for music lovers.
Worm included as unwanted extra for music lovers. A shipment of MP3 players sold in recent months by Dutch firm Victory has been found to be infected with the Fujacks worm, which… https://www.virusbulletin.com/blog/2008/01/batch-dutch-mp3-players-ships-malware/

Usual fare for holiday season

Storm ecards and social site spyware mark unsurprising year end.
Storm ecards and social site spyware mark unsurprising year end. With large portions of the globe celebrating various festivals over the past few weeks, an expected upsurge in… https://www.virusbulletin.com/blog/2008/01/usual-fare-holiday-season/

Guidelines issued for UK hacker tool ban

Government issues guidelines in response to lobbying.
Government issues guidelines in response to lobbying. The British government has published a set of guidelines for the application of a law that makes it illegal to create or… https://www.virusbulletin.com/blog/2008/01/guidelines-issued-uk-hacker-tool-ban/

Anti-malware school

F-Secure launches malware analysis course at Helsinki University.
F-Secure launches malware analysis course at Helsinki University. Researchers at F-Secure have decided to do their bit in helping to educate the next generation of malware… https://www.virusbulletin.com/blog/2008/01/anti-malware-school/

Mortgage spam rockets

Spammers take note of US interest rate cuts.
Spammers take note of US interest rate cuts. Mortgage spam saw a significant increase last month in conjunction with the interest rate cuts announced by the US Federal Reserve.… https://www.virusbulletin.com/blog/2008/01/mortgage-spam-rockets/

January

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2008/01/

More rogue Flash ads

Rogue ads infiltrate Expedia and Rhapsody sites.
Rogue ads infiltrate Expedia and Rhapsody sites. Following on from last month's feature on the SWF.AdHijack family (see VB, January 2008, p.12), malicious Flash ads were found to… https://www.virusbulletin.com/blog/2008/01/more-rogue-flash-ads/

January issue of VB published

The January issue of Virus Bulletin is now available for subscribers to download.
The January issue of Virus Bulletin is now available for subscribers to download. The January 2008 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2008/01/january-issue-vb-published/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.