Bulletin

Salted algorithm - part 2

Sality has been around for many years, yet it is still one of today’s most prevalent pieces of malware. Last month, Raul Alvarez described Sality’s algorithm, showing the strengths of its encryption, how it uses the stack as temporary memory for code…

Inside W32.Xpaj.B’S infection – part 2

Xpaj.B is one of the most complex and sophisticated file infectors in the world. It is difficult to detect, disinfect and analyse. Liang Yuan provides a deep analysis of its infection.

Don't forget to write

David Harley (ESET)

Industry veteran, prolific writer and educator David Harley reviews two recently published eBooks that aim to provide security guidance for consumers: Improve Your Security by Sorin Mustaca, and One Parent to Another by Tony Anscombe.

Medfos– an all-purpose redirector

Neo Tan (Fortinet)

Medfos is a heavily obfuscated trojan family which downloads modules capable of redirecting search engine results in the most popular browsers. Benjamin Chang and Neo Tan dissect the way the Medfos downloader deploys its downloaded modules, and the…

SGX: the good, the bad and the downright ugly

Richard Ford (Florida Institute of Technology)

A brand new instruction set coming to Intel’s processors in the near future has tremendous potential implications both for malware authors and for defenders. Shaun Davenport and Richard Ford describe the SGX technology and how people might use it.

Salted algorithm - part 1

Sality has been around for many years, yet it is still one of today’s most prevalent pieces of malware. In this two-part article, Raul Alvarez takes a close look at a variant of Sality that not only infects executables but also has some trojan-like…

Inside W32.Xpaj.B’s infection – part 1

Xpaj.B is one of the most complex and sophisticated file infectors in the world. It is difficult to detect, disinfect and analyse. In a two-part article, Liang Yuan provides a deep analysis of its infection.

The AV industry in the post-Snowden era

Fabio Assolini (Kaspersky Lab)

‘We should expect to see governments creating their own anti-malware products’ Fabio Assolini.

Greetz from academe: Ringing in the new

In the latest of his ‘Greetz from Academe’ series, highlighting some of the work going on in academic circles, John Aycock focuses on computer science surveys, looking in particular at one on binary code obfuscations in packer tools.

Mariposa writer sentenced

Author of malware behind one of the world's largest botnets receives prison sentence.