VB Blog

'Unsubscribe' URL in junk fax leads to malware

Posted by Virus Bulletin on Feb 24, 2012

Trojan downloader behind .co.cc URL.

Posted by Virus Bulletin on Feb 22, 2012

Increasing use of UDP to avoid communication tracking.

Posted by Virus Bulletin on Feb 16, 2012

Cutwail botnet likely behind campaign that sends users to Phoenix exploit kit.

Posted by Virus Bulletin on Feb 15, 2012

Comparative test did not take false positives into account.

Posted by Virus Bulletin on Feb 1, 2012

The February issue of Virus Bulletin is now available for subscribers to download.

Posted by Virus Bulletin on Jan 26, 2012

Security at registrars may be weak link.

Posted by Virus Bulletin on Jan 24, 2012

DNSBL users advised to avoid those lists that charge for delisting.

Posted by Virus Bulletin on Jan 19, 2012

Flaw allows for spam to be sent through customers' PCs.

Posted by Virus Bulletin on Jan 18, 2012

Business and consumer products achieve high pass rate.

Posted by Virus Bulletin on Jan 13, 2012

Defence companies among small number of targets.

Previous1...8788899091...215Next

Search blog

Ebury and Mayhem server malware families still active

Ebury and Mayhem, two families of Linux server malware, about which VB published papers back in 2014, are still active and have received recent updates.
Whether it is to send spam or to redirect web traffic to malicious payloads, compromised (Linux) web servers are the glue in many a malware campaign. Two such networks of… https://www.virusbulletin.com/blog/2017/10/ebury-and-mayhem-server-malware-families-still-active/

Malicious CCleaner update points to a major weakness in our infrastructure

Researchers from Cisco Talos have found that a recent version of the widely used CCleaner tool installed malware on the machine.
For the security community, 2017 might well be called the year of the update: two of the biggest security stories – the WannaCry outbreak and the Equifax breach – involved… https://www.virusbulletin.com/blog/2017/09/malicious-ccleaner-update-points-major-weakness-our-infrastructure/

VB2014 preview: two papers on Linux server malware

Researchers from ESET, Yandex and Symantec look at emerging malware trend.
Researchers from ESET, Yandex and Symantec look at emerging malware trend.In the weeks running up to VB2014 (the 24th Virus Bulletin International Conference), we are looking at… https://www.virusbulletin.com/blog/2014/09/preview-two-papers-linux-server-malware/

More than two million home routers have 'wide open backdoor'

Default password makes vulnerability easy to exploit.
Default password makes vulnerability easy to exploit. Researchers at Trend Micro have discovered an easy-to-exploit backdoor in routers from Chinese manufacturer Netcore, that… https://www.virusbulletin.com/blog/2014/08/more-two-million-home-routers-have-wide-open-backdoor/

'Son of Stuxnet' trojan found

'Duqu' used in targeted attacks to steal specific information.
'Duqu' used in targeted attacks to steal specific information. Researchers at both Symantec and McAfee have discovered a new Remote Access Trojan (RAT) with strong links to Stuxnet… https://www.virusbulletin.com/blog/2011/10/son-stuxnet-trojan-found/

Fake codec trojan disables anti-virus software

Victim tricked into believing security software still active.
Victim tricked into believing security software still active. A new trojan, discovered by researchers at ESET, spreads itself via fake codecs, then disables running anti-virus… https://www.virusbulletin.com/blog/2011/08/fake-codec-trojan-disables-anti-virus-software/

Hundreds of legitimate websites being hacked into

New mass infection leaves security researchers puzzled.
New mass infection leaves security researchers puzzled. Web security company ScanSafe has reported a new mass infection of websites, which it claims accounts for 15% of the web… https://www.virusbulletin.com/blog/2008/01/hundreds-legitimate-websites-being-hacked/

VB Blog

'Unsubscribe' URL in junk fax leads to malware

New Zeus/SpyEye botnet does away with command-and-control servers

200-fold increase in HTML-attachment spam

'Hotmail and Gmail have best spam filter' says Cascade spam test

February issue of VB published

Hacktivists hijack DNS of popular websites

New RFC describes best practices for running DNS-based lists

Vulnerability turns McAfee's anti-malware solution into open relay

AV-Test releases latest results

Sykipot trojan used to target smart cards