VB Blog

Black Hat Europe - day 2

Posted by Virus Bulletin on Oct 20, 2014

IPv6 versus IDPS, XSS in WYSIWYG editors, and reflected file downloads.

Posted by Virus Bulletin on Oct 17, 2014

Programme packed with interesting talks.

Posted by Virus Bulletin on Oct 16, 2014

Nick Sullivan describes how DNSSEC uses cryptography to add authentication and integrity to DNS responses.

Posted by Virus Bulletin on Oct 15, 2014

Surprisingly, the presence of more URLs doesn't necessarily make spam easier to block.

Posted by Virus Bulletin on Oct 15, 2014

Users and administrators urged to stop supporting the protocol, or at least to prevent downgrade attacks.

Posted by Virus Bulletin on Oct 14, 2014

Vulnerability used to download BlackEnergy trojan - as discussed during VB2014.

Posted by Virus Bulletin on Oct 13, 2014

Jean-Ian Boutin looks at the increased commoditization of webinjects.

Posted by Virus Bulletin on Oct 8, 2014

Malware switched to more effective Perl installer.

Posted by Virus Bulletin on Oct 8, 2014

Raul Alvarez studies cavity file infector.

Posted by Virus Bulletin on Sep 28, 2014

Thanks all for a fantastic conference and see you in Prague... or in Denver!

Previous1...6465666768...215Next

Search blog

Ebury and Mayhem server malware families still active

Ebury and Mayhem, two families of Linux server malware, about which VB published papers back in 2014, are still active and have received recent updates.
Whether it is to send spam or to redirect web traffic to malicious payloads, compromised (Linux) web servers are the glue in many a malware campaign. Two such networks of… https://www.virusbulletin.com/blog/2017/10/ebury-and-mayhem-server-malware-families-still-active/

Malicious CCleaner update points to a major weakness in our infrastructure

Researchers from Cisco Talos have found that a recent version of the widely used CCleaner tool installed malware on the machine.
For the security community, 2017 might well be called the year of the update: two of the biggest security stories – the WannaCry outbreak and the Equifax breach – involved… https://www.virusbulletin.com/blog/2017/09/malicious-ccleaner-update-points-major-weakness-our-infrastructure/

VB2014 preview: two papers on Linux server malware

Researchers from ESET, Yandex and Symantec look at emerging malware trend.
Researchers from ESET, Yandex and Symantec look at emerging malware trend.In the weeks running up to VB2014 (the 24th Virus Bulletin International Conference), we are looking at… https://www.virusbulletin.com/blog/2014/09/preview-two-papers-linux-server-malware/

More than two million home routers have 'wide open backdoor'

Default password makes vulnerability easy to exploit.
Default password makes vulnerability easy to exploit. Researchers at Trend Micro have discovered an easy-to-exploit backdoor in routers from Chinese manufacturer Netcore, that… https://www.virusbulletin.com/blog/2014/08/more-two-million-home-routers-have-wide-open-backdoor/

'Son of Stuxnet' trojan found

'Duqu' used in targeted attacks to steal specific information.
'Duqu' used in targeted attacks to steal specific information. Researchers at both Symantec and McAfee have discovered a new Remote Access Trojan (RAT) with strong links to Stuxnet… https://www.virusbulletin.com/blog/2011/10/son-stuxnet-trojan-found/

Fake codec trojan disables anti-virus software

Victim tricked into believing security software still active.
Victim tricked into believing security software still active. A new trojan, discovered by researchers at ESET, spreads itself via fake codecs, then disables running anti-virus… https://www.virusbulletin.com/blog/2011/08/fake-codec-trojan-disables-anti-virus-software/

Hundreds of legitimate websites being hacked into

New mass infection leaves security researchers puzzled.
New mass infection leaves security researchers puzzled. Web security company ScanSafe has reported a new mass infection of websites, which it claims accounts for 15% of the web… https://www.virusbulletin.com/blog/2008/01/hundreds-legitimate-websites-being-hacked/

VB Blog

Black Hat Europe - day 2

Black Hat Europe - day 1

VB2014 paper: DNSSEC - how far have we come?

Report: 15 solutions achieve VBSpam award

POODLE attack forces the Internet to move away from SSL 3.0

Windows zero-day used in targeted attacks

VB2014 paper: The evolution of webinjects

Shellshock used to spread Mayhem

Paper: The Hulk

VB2014: Slides day three