Bulletin

Cut the Cutwail

Kyle Yang (Fortinet)

After playing the cat-and-mouse game with AV companies for several months, the author(s) of Pushdo/Cutwail finally decided to change their advanced installer, in doing so changing the communication mechanism between the servers and bots. Kyle Yang…

Data tainting for malware analysis - part three (additional results)

Additional results.

Data tainting for malware analysis – part three

In this three-part series Florent Marceau studies the use and advantages of full virtualization in the security field. The third and final part looks at the implementation of the technology.

Researchers paid for Chrome bugs

Google invites security researchers to probe its browser.

Phishing and scams continue to rise

Reports show phishing attacks and 419 scams are on the rise, and users continue to fall for such scams.

Introduction to advanced memory analysis

Ken Dunham (iSIGHT Partners)

Advanced memory analysis allows for rapid assessment of potentially hostile executables in memory. Ken Dunham takes us through the three phases of operation in detail: triage, capture and analysis.

AMTSOlutely fabulous

David Harley (ESET)

Since its inception, the Anti-Malware Testing Standards Organization (AMTSO) has outlined its charter, held regular meetings, produced a range of standards documents and continues to work towards raising the overall standard of testing. However,…

Alwil avast! 5

Version 4 of Alwil's hugely popular avast! has been around for more than six years, and the prospect of a major new release has brought growing levels of excitement and anticipation among the product’s huge legions of fans. The VB lab team got their…

The web of darkness

Costin Raiu (Kaspersky Lab)

'There are now over 100 times more infected websites on the Internet than three years ago.' Costin Raiu, Kaspersky Lab.

It's a bird, it's a plane, it's Fooperman!

Peter Ferrie describes W32/Fooper, a virus that uses the FPU to magically transform a block of data in to executable code.