VB Blog

VB2014 preview: Apple without a shell - iOS under targeted attack

Posted by   Virus Bulletin on   Sep 12, 2014

FireEye researchers show a large attack vector for Apple's mobile operating system.

Read more  

Left-to-right override makes a return in spam

Posted by   Virus Bulletin on   Sep 11, 2014

Trick shows that spammers still try to beat content-based filters.

Read more  

Paper: Prosecting the Citadel botnet - revealing the dominance of the Zeus descendent: part two

Posted by   Virus Bulletin on   Sep 11, 2014

Aditya K. Sood and Rohit Bansal study the malware's behaviour when ran on a physical machine.

Read more  

Crypto blunder makes TorrentLocker easy to crack

Posted by   Virus Bulletin on   Sep 10, 2014

Use of single XOR key leaves ransomware open to known-plaintext attack.

Read more  

VB2014 preview: The three levels of exploit testing

Posted by   Virus Bulletin on   Sep 9, 2014

Richard Ford and Marco Carvalho present an idea for how to test products that claim to detect the unknown.

Read more  

VB2014 preview: last-minute papers added to the programme

Posted by   Virus Bulletin on   Sep 5, 2014

Hot topics to be covered at VB2014 conference in Seattle.

Read more  

Paper: Prosecting the Citadel botnet - revealing the dominance of the Zeus descendent: part one

Posted by   Virus Bulletin on   Sep 3, 2014

Aditya K. Sood and Rohit Bansal dissect botnet primarily used for financial fraud.

Read more  

VB2014 preview: Swipe away, we're watching you

Posted by   Virus Bulletin on   Sep 2, 2014

Hong Kei Chan and Liang Huang describe the various aspects and the evolution of point-of-sale malware.

Read more  

VB2014 preview: Design to discover: security analytics with 3D visualization engine

Posted by   Virus Bulletin on   Aug 29, 2014

Thibault Reuille and Dhia Mahjoub use particle physics to shows clusters of malicious domains.

Read more  

Srizbi kernel-mode spambot reappears as Pitou

Posted by   Virus Bulletin on   Aug 28, 2014

Malware possibly still in the 'brewing' stage.

Read more  

Search blog

Symantec warns of rigged Google search links

Advanced search options lead clickers straight to junk sites.
Advanced search options lead clickers straight to junk sites. Spammers have found a novel use for Google's advanced search options and 'I'm Feeling Lucky' function, using a… https://www.virusbulletin.com/blog/2007/11/symantec-warns-rigged-google-search-links/

Kaspersky teams up with Bit9

Whitelisting knowledgebase to be used in future security products.
Whitelisting knowledgebase to be used in future security products. A strategic partnership has been announced between Kaspersky Labs and application control specialist Bit9. The… https://www.virusbulletin.com/blog/2007/11/kaspersky-teams-bit9/

E-crime unit to get government funding?

UK government responds to House of Lords call for better policing of the Internet.
UK government responds to House of Lords call for better policing of the Internet. The UK government has indicated that it may set up a new national police unit dedicated to… https://www.virusbulletin.com/blog/2007/11/e-crime-unit-get-government-funding/

Phishing trojan targets Mac OSX

DNS hijack disguised as codec threatens Apple systems.
DNS hijack disguised as codec threatens Apple systems. A new trojan affecting Apple's Mac OSX operating system - a relative rarity in the malware world - has been seen in the wild.… https://www.virusbulletin.com/blog/2007/11/phishing-trojan-targets-mac-osx/

VB100 NetWare update

Updated results for VB100 NetWare comparative.
Updated results for VB100 NetWare comparative.VB regrets that some erroneous results were recorded for Symantec AntiVirus 10 in last month's comparative review on Novell NetWare… https://www.virusbulletin.com/blog/2007/11/netware-update/

November issue of VB published

The November issue of Virus Bulletin is now available for subscribers to download.
The November issue of Virus Bulletin is now available for subscribers to download. The November 2007 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2007/11/november-issue-vb-published/

Supermarket sweep

Phishers almost get away with $10m scam.
Phishers almost get away with $10m scam. Court documents have revealed that phishers nearly managed a whopping $10 million supermarket (bank account) sweep earlier this year.… https://www.virusbulletin.com/blog/2007/11/supermarket-sweep/

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/11/

The sound of spam

Firm reports 15 million MP3 spams in October.
Firm reports 15 million MP3 spams in October. Last month saw pump-and-dump spammers try out yet another file type for getting their message across to the gullible: MP3 audio… https://www.virusbulletin.com/blog/2007/11/sound-spam/

Melissa has users CAPTCHA'd

Spammers offer strip show for correctly completed CAPTCHAs.
Spammers offer strip show for correctly completed CAPTCHAs. Spammers have spotted a new opportunity for getting humans to help them get past the CAPTCHA tests put in place to… https://www.virusbulletin.com/blog/2007/11/melissa-has-users-captcha-d/

McAfee acquires website trust mark firm

ScanAlert certification system bought for $51 million.
ScanAlert certification system bought for $51 million.McAfee has bought ScanAlert, the firm behind the 'Hacker Safe' trust mark logo, carried by some 75,000 websites to indicate… https://www.virusbulletin.com/blog/2007/10/mcafee-acquires-website-trust-mark-firm/

Storm spams promise spooky Halloween

Tricks not treats as skeleton game emails link to attack.
Tricks not treats as skeleton game emails link to attack. The 'Storm' attack has once again taken advantage of a popular cultural occasion to spam out the latest wave of links to… https://www.virusbulletin.com/blog/2007/10/storm-spams-promise-spooky-halloween/

FTC demands more power against spyware

Prosecutions and fines needed to deter badware makers.
Prosecutions and fines needed to deter badware makers. Representatives of the US Federal Trade Commission (FTC), the consumer protection body which has seen some success in the… https://www.virusbulletin.com/blog/2007/10/ftc-demands-more-power-against-spyware/

Trend Micro invests in leak-prevention firm

Further data security added to portfolio.
Further data security added to portfolio. Security giant Trend Micro has acquired California-based data leak prevention specialist Provilla, to add its data protection technologies… https://www.virusbulletin.com/blog/2007/10/trend-micro-invests-leak-prevention-firm/

Microsoft unveils January-June threat report

Security analysis shows rise in vulnerabilities, trojans and scamware.
Security analysis shows rise in vulnerabilities, trojans and scamware.Microsoft has released its latest 'Security Intelligence Report', covering the first half of 2007, showing a… https://www.virusbulletin.com/blog/2007/10/microsoft-unveils-january-june-threat-report/

Spyware maker Direct Revenue closes doors

Notorious company forced out of business by legal actions.
Notorious company forced out of business by legal actions. After numerous lawsuits and fines, adware and spyware maker Direct Revenue is no more. The firm behind a swathe of… https://www.virusbulletin.com/blog/2007/10/spyware-maker-direct-revenue-closes-doors/

PDF trojan exploits Adobe flaw

Reader/Acrobat vulnerability targeted day after patch release.
Reader/Acrobat vulnerability targeted day after patch release. A vulnerability in Adobe's popular PDF-viewing software Adobe Reader and editing suite Acrobat, first reported a… https://www.virusbulletin.com/blog/2007/10/pdf-trojan-exploits-adobe-flaw/

Latest VB100 announced

Windows 2000 Professional products to be tested.
Windows 2000 Professional products to be tested. VB has issued a call for submissions for the latest VB100 comparative review, which will measure the performance of products for… https://www.virusbulletin.com/blog/2007/10/latest-announced/

RealPlayer zero-day flaw exploited

Manufacturer responds rapidly to serious security hole.
Manufacturer responds rapidly to serious security hole. A zero-day vulnerability in the popular media playing system RealPlayer was spotted being exploited in the wild late last… https://www.virusbulletin.com/blog/2007/10/realplayer-zero-day-flaw-exploited/

Pump-and-dumpers move on to MP3 spam

Audio files latest stock pushing tactic.
Audio files latest stock pushing tactic. Pump-and-dump spammers have moved on from image spam, PDF spam and Excel spreadsheet spam to try out yet another file type: MP3 audio… https://www.virusbulletin.com/blog/2007/10/pump-and-dumpers-move-mp3-spam/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.