VB Blog

Transparency is essential when monitoring your users' activities

Posted by   Virus Bulletin on   Sep 20, 2017

Activity monitoring by security products in general, and HTTPS traffic inspection in particular, are sensitive issues in the security community. There is a time and a place for them, VB's Martijn Grooten argues, but only when they are done right.

Read more  

VB2017 preview: Android reverse engineering tools: not the usual suspects

Posted by   Martijn Grooten on   Sep 19, 2017

We preview the VB2017 paper by Fortinet researcher Axelle Apvrille, in which she looks at some less obvious tools for reverse engineering Android malware.

Read more  

Malicious CCleaner update points to a major weakness in our infrastructure

Posted by   Martijn Grooten on   Sep 18, 2017

Researchers from Cisco Talos have found that a recent version of the widely used CCleaner tool installed malware on the machine.

Read more  

Despite the profitability of ransomware there is a good reason why mining malware is thriving

Posted by   Virus Bulletin on   Sep 15, 2017

Though ransomware is far more profitable than using a compromised PC to mine bitcoins, the global distribution of malware means that there are many botnets for which mining is the most efficient way to extract money out of a PC.

Read more  

VB2017 preview: Crypton - exposing malware's deepest secrets

Posted by   Martijn Grooten on   Sep 14, 2017

We preview the VB2017 paper by Julia Karpin and Anna Dorfman (F5 networks), in which they present a tool to decrypt encrypted parts of malware.

Read more  

VB2017 preview: Hacktivism and website defacement: motivations, capabilities and potential threats

Posted by   Martijn Grooten on   Sep 13, 2017

We preview the VB2017 paper by Marco Romagna and Niek Jan van den Hout (The Hague University of Applied Sciences), in which they thoroughly analyse the motivations and modus operandy of hacktivists.

Read more  

Three questions to ask about security product bypasses

Posted by   Martijn Grooten on   Sep 13, 2017

Proof-of-concepts for bypasses of security products always sound scary, but how seriously should we take them? VB Editor Martijn Grooten lists three questions one should ask about any such bypass to determine how serious a threat it represents.

Read more  

VB2017: WHOIS and EICAR Small Talks added

Posted by   Martijn Grooten on   Sep 12, 2017

Today, we announce two more 'Small Talks' for the VB2017 programme. In one of them, Neil Schwarzman will discuss the consequences of the GDPR for WHOIS and abuse research, while the other will be hosted by three members of EICAR, who will discuss its work on a trustworthiness strategy and minimum standard.

Read more  

VB2017: nine last-minute papers announced

Posted by   Martijn Grooten on   Sep 11, 2017

From attacks on Ukraine's power grid to web shells, and from car hacking to ransomware: we announce the first nine 'last-minute' papers on the VB2017 programme.

Read more  

Patching is important even when it only shows the maturity of your security process

Posted by   Martijn Grooten on   Sep 5, 2017

A lot of vulnerabilities that are discovered are never exploited in the wild. It is still important to patch them though.

Read more  

Search blog

BlackHat shows off yet more holes

As conference highlights security issues, MS dares hackers to find more.
As conference highlights security issues, MS dares hackers to find more. A tidal wave of new security flaws, and vectors for hacking and malware, has gushed out of the BlackHat… https://www.virusbulletin.com/blog/2006/08/blackhat-shows-yet-more-holes/

More vulns in AV products

eTrust, PC Tools suffer security bugs.
eTrust, PC Tools suffer security bugs. CA's WebScan has had several security holes discovered in its ActiveX control system, while PC Tools AntiVirus has been revealed to have… https://www.virusbulletin.com/blog/2006/08/more-vulns-av-products/

Norton scares vicars

Sermon software spyware, says Symantec.
Sermon software spyware, says Symantec. Popular software used by Church of England clergy has been mislabelled as spyware by Symantec's Norton software. The software, called… https://www.virusbulletin.com/blog/2006/08/norton-scares-vicars/

Serious vulns in Centrino wireless

Intel releases generic patches, urges users to seek specific fixes.
Intel releases generic patches, urges users to seek specific fixes. Several security flaws have been exposed in Intel's Centrino wireless technology, which could allow hackers to… https://www.virusbulletin.com/blog/2006/08/serious-vulns-centrino-wireless/

Virus writers continue targeting Microsoft's latest ideas

Another piece of malware for MS Powershell.
Another piece of malware for MS Powershell. Another piece of malware for Microsoft's Powershell is making the news. The script virus exploits the new command shell, formerly known… https://www.virusbulletin.com/blog/2006/08/virus-writers-continue-targeting-microsoft-s-latest-ideas/

Apple releases patches - Mac debate rumbles on

Are Macs safer than Windows PCs? Oh yes they are... Oh no they're not.. etc.
Are Macs safer than Windows PCs? Oh yes they are... Oh no they're not.. etc. Spokespeople for various AV companies continue to add to the 'are Macs safer?' debate kicked off last… https://www.virusbulletin.com/blog/2006/08/apple-releases-patches-mac-debate-rumbles/

Supermarket scammed by hacker employees

Supermarket sweep.
Supermarket sweep. In a plot mirroring the Mike Judge comedy Office Space, a team of supermarket employees in Manama created trojan software to tweak company databases and steal… https://www.virusbulletin.com/blog/2006/08/supermarket-scammed-hacker-employees/

Rain of phish hits UK

Single botnet responsible for 8 million phishing emails.
Single botnet responsible for 8 million phishing emails. A single botnet has unleashed over 8 million phishing emails on UK targets over the last few days, according to mail… https://www.virusbulletin.com/blog/2006/08/rain-phish-hits-uk/

Hi-tech phreaking and other VoIP woes

Security issues with VoIP technology revealed at Black Hat USA.
Security issues with VoIP technology revealed at Black Hat USA. Security issues with VoIP technology, allowing hackers to access corporate services and sell them on, as well as… https://www.virusbulletin.com/blog/2006/08/hi-tech-phreaking-and-other-voip-woes/

Vietnamese botnet-keeper arrested

Student launched DDoS attacks 'just for fun'.
Student launched DDoS attacks 'just for fun'. A Hanoi student who used the forums he ran to recruit and control a botnet has been arrested. The as-yet-unnamed youth used the… https://www.virusbulletin.com/blog/2006/08/vietnamese-botnet-keeper-arrested/

Symantec, McAfee suffer bugs

Norton and VirusScan afflicted.
Norton and VirusScan afflicted.Symantec has issued details of a minor bug in its Norton AV software - a recent update left some users seeing confusing messages claiming the… https://www.virusbulletin.com/blog/2006/08/symantec-mcafee-suffer-bugs/

Interpol site spoofed

Beware fake international police organizations...
Beware fake international police organizations... Practitioners of ur-phish, the 419 scam, have set up a doctored mirror of Interpol's website, as a ruse to ease victims' worries… https://www.virusbulletin.com/blog/2006/08/interpol-site-spoofed/

BBC hypes 'more than 95% spam rate'

Shock figure drawn from dubious source.
Shock figure drawn from dubious source. The BBC online news website has published an article under the headline 'More than 95% of e-mail is "junk"'. The report, which was linked… https://www.virusbulletin.com/blog/2006/08/bbc-hypes-more-95-spam-rate/

Security products scoop sales top ten

Strong sales for security products in June.
Strong sales for security products in June. A hefty seven of the top 10 software products sold over the counter in June were security-related, according to sales tracking… https://www.virusbulletin.com/blog/2006/08/security-products-scoop-sales-top-ten/

F-Secure announces healthy figures

Finnish AV firm shows strong performance.
Finnish AV firm shows strong performance.F-Secure's latest financial announcement reports a 35% growth in revenues, and an 88% growth in operating profits. The success is put down… https://www.virusbulletin.com/blog/2006/08/f-secure-announces-healthy-figures/

Linux magazine prints rootkit how-to

Arming sys admins with all they need to know to write a rootkit...
Arming sys admins with all they need to know to write a rootkit... Imaginatively named magazine for Linux users Linux Magazine has published an article entitled 'How to write a… https://www.virusbulletin.com/blog/2006/08/linux-magazine-prints-rootkit-how/

New and revised laws

New anti-spam laws prepared and old ones revisited.
New anti-spam laws prepared and old ones revisited. One of the world's top spam-sending hot spots is currently preparing for the launch of its first anti-spam laws. Together with… https://www.virusbulletin.com/blog/2006/08/new-and-revised-laws/

August issue of VB published

The August issue of Virus Bulletin is now available for subscribers to download.
The August issue of Virus Bulletin is now available for subscribers to download. The August 2006 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2006/08/august-issue-vb-published/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/08/

Supply of data to spammers stopped

Database thief charged.
Database thief charged. A US man has been charged with stealing a database of US physicians with the intention of selling it on to spammers. Forty-six-year-old William Bailey, Jr… https://www.virusbulletin.com/blog/2006/08/supply-data-spammers-stopped/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.