VB Blog

CSRF vulnerability in USB modems allows for infrastructure-less phishing

Posted by   Virus Bulletin on   Jan 29, 2014

Credentials sent to attacker by built-in SMS functionality.

Read more  

Browser-based ransomware uses scare tactics to extort money

Posted by   Virus Bulletin on   Jan 24, 2014

Unsophisticated scam shows the high level of commoditization of today's cybercrime.

Read more  

Is your fridge sending spam?

Posted by   Virus Bulletin on   Jan 21, 2014

It's possible that smart devices are sending spam, but it wouldn't make any difference.

Read more  

January issue of VB published

Posted by   Virus Bulletin on   Jan 1, 2014

The January issue of Virus Bulletin is now available for subscribers to download.

Read more  

Botconf - the 'first botnet fighting conference'

Posted by   Virus Bulletin on   Dec 10, 2013

Tools, ideas and research presented in Nantes.

Read more  

VB2014: more of the same, plus something a little different

Posted by   Virus Bulletin on   Dec 9, 2013

Hackers, network security researchers encouraged to submit abstracts for the conference.

Read more  

December issue of VB published

Posted by   Virus Bulletin on   Dec 1, 2013

The December issue of Virus Bulletin is now available for subscribers to download.

Read more  

Spamhaus CIO calls for those running open DNS resolvers to be fined

Posted by   Virus Bulletin on   Nov 29, 2013

Open DNS resolvers instrumental in many DDoS attacks.

Read more  

Privilege escalation vulnerability targets Windows XP and Server 2003

Posted by   Virus Bulletin on   Nov 28, 2013

Vulnerability being used in the wild in combination with exploit of patched Adobe Reader vulnerability.

Read more  

There is a place for unauthenticated key exchange, but don't tell anyone

Posted by   Virus Bulletin on   Nov 21, 2013

Making dragnet surveillance harder justifies using weak form of encryption.

Read more  

Search blog

Storm botnet evolution hints at spam and DDoS renting

Latest change in tactics could mean zombie clusters for hire.
Latest change in tactics could mean zombie clusters for hire. The latest twist in the long-running 'Storm' saga, the use of encryption in communications between infected hosts and… https://www.virusbulletin.com/blog/2007/10/storm-botnet-evolution-hints-spam-and-ddos-renting/

Bulletproof hosting firm claims legitimacy

Crime-laden Russian service threatens to sue detractors.
Crime-laden Russian service threatens to sue detractors. A notorious Russian firm offering 'bulletproof hosting' - website hosting services with a guarantee that sites will not be… https://www.virusbulletin.com/blog/2007/10/bulletproof-hosting-firm-claims-legitimacy/

Kaspersky fixes serious vulnerability in Online Scanner

Exploitable ActiveX control replaced in new version.
Exploitable ActiveX control replaced in new version.Kaspersky Lab has released an updated version of its popular free online scanner to remedy a vulnerability in an ActiveX control… https://www.virusbulletin.com/blog/2007/10/kaspersky-fixes-serious-vulnerability-online-scanner/

Five to six years for $1 million porn spammers

Strong sentences for CAN-SPAM breaches, money laundering.
Strong sentences for CAN-SPAM breaches, money laundering. Two US men found guilty in June of breaching the terms of the 2003 CAN-SPAM Act, as well as numerous other charges… https://www.virusbulletin.com/blog/2007/10/five-six-years-1-million-porn-spammers/

Online fraud fighters' reputation targeted by crooks

Joe Job attack aims to blacken good name of UK crimefighter Bobbear.
Joe Job attack aims to blacken good name of UK crimefighter Bobbear. In a smear attack against UK-based online fraud-fighting website Bobbear.co.uk, spammers have sent out email… https://www.virusbulletin.com/blog/2007/10/online-fraud-fighters-reputation-targeted-crooks/

Word for Mac exploit spotted

Patch Tuesday flaw targeted by vulnerability.
Patch Tuesday flaw targeted by vulnerability. A vulnerability in the Apple Mac version of Microsoft Word, covered by a patch in this month's Patch Tuesday security update, has been… https://www.virusbulletin.com/blog/2007/10/word-mac-exploit-spotted/

Storm attack strikes back

Cute kitten cards cover latest wave of malware.
Cute kitten cards cover latest wave of malware. The Storm attack has returned with yet another wave of blended attacks, with links to the drive-by download sites of the initial… https://www.virusbulletin.com/blog/2007/10/storm-attack-strikes-back/

4 out of 5 critical issues fixed on Patch Tuesday

Expected patch omitted from monthly security update.
Expected patch omitted from monthly security update.Microsoft has announced the contents of its monthly 'Patch Tuesday' security update release, with four 'Critical' and two… https://www.virusbulletin.com/blog/2007/10/4-out-5-critical-issues-fixed-patch-tuesday/

Adobe acknowledges PDF flaw, issues workaround

Registry hack provides temporary fix for vulnerability.
Registry hack provides temporary fix for vulnerability.Adobe has officially confirmed the vulnerability announced last month by researcher Petko Petkov, which could allow… https://www.virusbulletin.com/blog/2007/10/adobe-acknowledges-pdf-flaw-issues-workaround/

Spam sneaked out via YouTube systems

Entertainment site service used to send junk mails.
Entertainment site service used to send junk mails. Spammers have taken advantage of an email service provided by popular video clip site YouTube, to send out spams pushing dating… https://www.virusbulletin.com/blog/2007/10/spam-sneaked-out-youtube-systems/

McAfee invests in encryption firm

SafeBoot acquired for $350 million.
SafeBoot acquired for $350 million.McAfee has announced the acquisition of encryption and device control specialist SafeBoot, which produces a range of security products for PCs… https://www.virusbulletin.com/blog/2007/10/mcafee-invests-encryption-firm/

Smaller vendors question rumours of impending doom

Experts deny claims that flood of threats gives bigger firms advantage.
Experts deny claims that flood of threats gives bigger firms advantage. High levels of new malware, emerging at an ever-increasing rate, may mean smaller security firms will no… https://www.virusbulletin.com/blog/2007/10/smaller-vendors-question-rumours-impending-doom/

Sun patches serious Java flaws

Critical vulnerabilities covered by urgent patches.
Critical vulnerabilities covered by urgent patches.Sun Microsystems has issued a series of patches to fix several vulnerabilities in its popular Java software. Successful… https://www.virusbulletin.com/blog/2007/10/sun-patches-serious-java-flaws/

US users overestimating PC security

Survey finds people are less protected than they think.
Survey finds people are less protected than they think. A joint study carried out by McAfee and the National Cyber Security Alliance (NCSA) has found that many US consumers wrongly… https://www.virusbulletin.com/blog/2007/10/us-users-overestimating-pc-security/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/10/

Trivia

Panda reveals country with lowest level of infected PCs.
Panda reveals country with lowest level of infected PCs.Panda Security has revealed that results from its online malware-scanning tool Nanoscan indicate that computers it scanned… https://www.virusbulletin.com/blog/2007/10/trivia/

Alarm over possible PDF flaw

Vulnerability announcement hyped to disaster level.
Vulnerability announcement hyped to disaster level. The announcement of a potentially serious vulnerability in the ubiquitous Adobe PDF document format sparked considerable media… https://www.virusbulletin.com/blog/2007/10/alarm-over-possible-pdf-flaw/

October issue of VB published

The October issue of Virus Bulletin is now available for subscribers to download.
The October issue of Virus Bulletin is now available for subscribers to download. The October 2007 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2007/10/october-issue-vb-published/

Phil makes anti-phishing education child's play

Researchers create game to raise awareness.
Researchers create game to raise awareness. Researchers at Carnegie Mellon University have created an interactive game designed to teach players how to identify phishing URLs and… https://www.virusbulletin.com/blog/2007/10/phil-makes-anti-phishing-education-child-s-play/

What's in a number?

Latest round of spam stats.
Latest round of spam stats. According to various reports last month, spam now accounts for 83%, 85%, 91.9% or 95% of all emails received. Regardless of the inconsistencies, the… https://www.virusbulletin.com/blog/2007/10/what-s-number/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.