VB Blog

VB2016 paper: Mobile applications: a backdoor into the Internet of Things?

Posted by   Martijn Grooten on   Nov 29, 2016

While the Internet of Things blossoms with newly connected objects every day, the security and privacy of these objects is often overlooked, making the IoT a major security concern. Unfortunately, reverse-engineering so-called smart devices is not an easy task. In her VB2016 paper, Axelle Apvrille presented a novel way of analysing smart devices: by looking at the accompanying mobile app. Today, we publish both Axelle’s paper and the video recording of her VB2016 presentation.

Read more  

VB2016 paper: Wave your false flags! Deception tactics muddying attribution in targeted attacks

Posted by   Martijn Grooten on   Nov 21, 2016

Today, we publish the VB2016 paper and presentation (recording) by Kaspersky Lab researchers Juan Andrés Guerrero-Saade and Brian Bartholomew, in which they look at some of the deception tactics used in targeted attacks.

Read more  

Throwback Thursday: The Politics of Anti-Virus

Posted by   Helen Martin on   Nov 10, 2016

President-elect of the United States Donald Trump made a number of promises about cybersecurity during his electoral campaign. What comes of those pledges remains to be seen, but one thing is certain: there will be a team of hard-working, dedicated individuals working behind the scenes to protect the computer systems of Federal government agencies, as there have been for years. Back in 1999, VB published a report describing a day in the life of the Affiliated Computer Services Government Solutions Group (ACS GSG) - the group responsible for providing full service computer support to US Federal government agencies across the United States.

Read more  

VB2016 paper: The TAO of Automated Iframe Injectors - Building Drive-by Platforms For Fun

Posted by   Martijn Grooten on   Oct 18, 2016

We publish Aditya K. Sood's VB2016 paper on the use of iframe injectors by cybercriminals to deliver drive-by downloads.

Read more  

“Cybersecurity is, at its core, a people problem,” says VB2016 keynote speaker

Posted by   Virus Bulletin on   Sep 26, 2016

An interview with VB2016’s keynote speaker Christine Whalley - Director, Governance and IT Risk Management at Pfizer

Read more  

Throwback Thursday: Following the Breadcrumbs

Posted by   Helen Martin on   Sep 22, 2016

In 1999, Christine Orshesky described how one large organization decided to find out how and where the viruses within it were being obtained so it could do more to protect its networks.

Read more  

VB2016 preview: Cryptography mistakes in malware

Posted by   Martijn Grooten on   Sep 15, 2016

At VB2016, two talks will discuss mistakes made by malware authors in cryptographic implementations. Ben Herzog and Yaniv Balmas will present a paper in which they look at a number of these mistakes, while Malwarebytes researcher hasherezade will present a last-minute paper on making use of some of these mistakes to crack ransomware.

Read more  

GPS technology is more at risk from cyber attack than ever before, security expert demonstrates at VB2016

Posted by   Virus Bulletin on   Sep 14, 2016

Next month at VB2016, HPE Security's Oleg Petrovsky will speak about attacks on GPS. We conducted a short interview with Oleg and asked him about GPS, about the conference, and about his ultimate dinner party.

Read more  

BSides Denver: Join and Support the Security Community

Posted by   Martijn Grooten on   Sep 13, 2016

If you are coming to VB2016 in Denver, why not spend an extra day in the Mile-High City and join the free BSides Denver conference, which takes place on Saturday?

Read more  

VB2016 'Last-Minute' Papers Announced

Posted by   Martijn Grooten on   Sep 13, 2016

We are excited to announce the addition of the "last-minute" papers to the VB2016 programme: nine presentations covering hot research topics, from OS X attacks to exotic APTs, breaking ransomware and the current state of BGP.

Read more  

Search blog

Gigabyte arrested

Well known female virus writer arrested. Finally.
Well known female virus writer arrested. Finally. Last month the Belgian Federal Crime Unit reported that they had arrested and questioned the virus writer known as 'Gigabyte'.… https://www.virusbulletin.com/blog/2004/02/gigabyte-arrested/

More core wars

Virus vs virus - new Welchia variant seeks to destroy Mydoom.
Virus vs virus - new Welchia variant seeks to destroy Mydoom. Today we can say our goodbyes to Mydoom.A - which is programmed to stop spreading on today's date, 12 February 2004.… https://www.virusbulletin.com/blog/2004/02/more-core-wars/

News summary

Why technical writing is best left to technical journalists, Netcraft monitors SCO, and February's VB magazine
Why technical writing is best left to technical journalists, Netcraft monitors SCO, and February's VB magazine There is yet another great rant on the ZDNet website. Josh Mehlman… https://www.virusbulletin.com/blog/2004/02/news-summary/

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/02/

Congressional attack on inboxes

US Congressional representatives send bulk email
US Congressional representatives send bulk email While congratulating themselves for (supposedly) stemming the flow of spam with the passage of the CAN-SPAM anti-spam… https://www.virusbulletin.com/blog/2004/01/congressional-attack-inboxes/

An end to 419 spam?

Nigerian government takes action.
Nigerian government takes action. Fed up of the stigma that 419 email scammers bring to Nigeria's reputation and keen to build investor confidence in the country, Nigeria's… https://www.virusbulletin.com/blog/2004/01/end-419-spam/

MyDoom, YourDoom, OurDoom

SCO offers a bounty for the arrest of the MyDoom author, Bruce Perens offers a conspiracy theory...
SCO offers a bounty for the arrest of the MyDoom author, Bruce Perens offers a conspiracy theory... SCO is offering a reward for information leading to the arrest of the author… https://www.virusbulletin.com/blog/2004/01/mydoom-yourdoom-ourdoom/

Divine intervention

AV on a spiritual level
AV on a spiritual level We all know how quickly time flies when we're having fun, or when there's a deadline looming, but a recent news report on the Asian news website Channel… https://www.virusbulletin.com/blog/2004/01/divine-intervention/

Waiting, reflecting and removing

Microsoft reports success of Blaster removal tool
Microsoft reports success of Blaster removal tool While young Romanian virus author Dan Dumitru Ciobanu awaited trial by a Romanian court last month for releasing a variant of… https://www.virusbulletin.com/blog/2004/01/waiting-reflecting-and-removing/

News summary...

Blaster (variant) author charged, AhnLab warns against complacency, India launches CERT-In, more on monoculture, and what's new in the spam world...
Blaster (variant) author charged, AhnLab warns against complacency, India launches CERT-In, more on monoculture, and what's new in the spam world... In much the same way that the… https://www.virusbulletin.com/blog/2004/01/news-summary/

Email coaching for marketers

DMA releases quick-glance reference guide for email marketers.
DMA releases quick-glance reference guide for email marketers. The Direct Marketing Association (DMA) has released a quick-glance reference guide for marketers entitled 'The CAN… https://www.virusbulletin.com/blog/2004/01/email-coaching-marketers/

Ahnlab partners with Sina.com

Ahnlab gets major ASP deal in China.
Ahnlab gets major ASP deal in China. Ahnlab has acquired a major stepping-stone into the Chinese domestic market, according to an article published by the Korea Herald, by… https://www.virusbulletin.com/blog/2004/01/ahnlab-partners-sina-com/

Weekend round-up

Narrowband blues, 2004 predictions, VeriSign scuttles Symantec, Dloader/Xombie
Narrowband blues, 2004 predictions, VeriSign scuttles Symantec, Dloader/Xombie It's been a busy few days as 2004 starts to get into full swing. VB has a roundup of the weekend's… https://www.virusbulletin.com/blog/2004/01/weekend-round/

Security-conscious processors

AMD and Intel prep technology to prevent buffer overflows at the hardware level.
AMD and Intel prep technology to prevent buffer overflows at the hardware level. IT news site Silicon.com has published an article about hardware security in CPUs to prevent… https://www.virusbulletin.com/blog/2004/01/security-conscious-processors/

2004

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsJanuary issue released The Virus Bulletin January 2005 issue is on its way. 23 December 2004Latest VGrep The latest version of the virus name lookup tool - VGrep, is now… https://www.virusbulletin.com/blog/2004/

January

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2004/01/

US and UK spam legislation in place

Anti-spam legislation in place.
Anti-spam legislation in place. While the 'CAN-SPAM Act' is expected to have been signed into US law by 1 January 2004, December 2003 saw the introduction of anti-spam… https://www.virusbulletin.com/blog/2003/12/us-and-uk-spam-legislation-place/

Number crunching

Calculating the average cost of a virus attack - estimates or guesstimates?
Calculating the average cost of a virus attack - estimates or guesstimates? This month has seen a flurry of the traditional end-of-year predictions for the security challenges in… https://www.virusbulletin.com/blog/2003/12/number-crunching/

SAS - the SysAsmin Service?

Computer security experts prepare to become special constables.
Computer security experts prepare to become special constables. A set of proposals for tackling computer crime has been published by UK Parliamentary lobby group EURIM and the… https://www.virusbulletin.com/blog/2003/12/sas-sysasmin-service/

Seasonal spamming

Increase in spam in lead up to holiday season.
Increase in spam in lead up to holiday season. A recent study carried out by Corvigo, suggests that the volume of spam in our inboxes showed a marked increase over the lead up to… https://www.virusbulletin.com/blog/2003/12/seasonal-spamming/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.