VB Blog

Paper: Mayhem - a hidden threat for *nix web servers

Posted by   Virus Bulletin on   Jul 17, 2014

New kind of malware has the functions of a traditional Windows bot, but can act under restricted privileges in the system.

Read more  

Google's Project Zero to hunt for zero-days

Posted by   Virus Bulletin on   Jul 16, 2014

Bugs to be reported to the vendor only, and to become public once patched.

Read more  

Paper: API-EPO

Posted by   Virus Bulletin on   Jul 14, 2014

Raul Alvarez studies the unique EPO methodology used by the W32/Daum file infector.

Read more  

Paper: Not old enough to be forgotten: the new chic of Visual Basic 6

Posted by   Virus Bulletin on   Jul 10, 2014

Marion Marschalek looks at two Miuref binaries: one packed with Visual Basic 6 and one with C++.

Read more  

Paper: VBA is not dead!

Posted by   Virus Bulletin on   Jul 7, 2014

Gabor Szappanos looks at the resurgence of malicious VBA macros that use social engineering to activate.

Read more  

'Cyber attack on hedge fund' turns out to be internal 'scenario' used by BAE Systems

Posted by   Virus Bulletin on   Jul 3, 2014

Story that appeared to be taken from fiction turns out... to have been fiction.

Read more  

Paper: Obfuscation in Android malware, and how to fight back

Posted by   Virus Bulletin on   Jul 2, 2014

Axelle Apvrille and Ruchna Nigam look at both off-the-shelf products and custom obfuscation techniques.

Read more  

Virus Bulletin celebrates 25th birthday by making all content free

Posted by   Virus Bulletin on   Jul 1, 2014

Neither subscription nor registration required to access content.

Read more  

Exploit kit requires link to be clicked before redirection

Posted by   Virus Bulletin on   Jun 23, 2014

Automatic analysis of malicious payloads becomes a little bit harder again.

Read more  

Cheap Android phone comes shipped with spyware

Posted by   Virus Bulletin on   Jun 19, 2014

Trojan masquerades as Google Play app; cannot be removed.

Read more  

Search blog

'Son of Stuxnet' trojan found

'Duqu' used in targeted attacks to steal specific information.
'Duqu' used in targeted attacks to steal specific information. Researchers at both Symantec and McAfee have discovered a new Remote Access Trojan (RAT) with strong links to Stuxnet… https://www.virusbulletin.com/blog/2011/10/son-stuxnet-trojan-found/

Attack targets government agencies in CIS countries

Trojans used to steal specific files.
Trojans used to steal specific files. Researchers at Trend Micro have discovered an ongoing targeted attack against, among others, government agencies and diplomatic missions in… https://www.virusbulletin.com/blog/2011/09/attack-targets-government-agencies-cis-countries/

Windows Help Files used in targeted attacks

Files with code-executing properties attached to emails.
Files with code-executing properties attached to emails. Researchers at Symantec have discovered Windows Help Files being used in targeted attacks. Such help files, which use the… https://www.virusbulletin.com/blog/2011/09/windows-help-files-used-targeted-attacks/

Adobe releases emergency update for Flash Player

Zero-day exploit actively being abused.
Zero-day exploit actively being abused.Adobe has announced it will release an update for its Flash Player on Friday 15 April, fixing a vulnerability that is currently being… https://www.virusbulletin.com/blog/2011/04/adobe-releases-emergency-update-flash-player/

« Previous 12 Next »

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.