VB Blog

Paper: How It Works: Steganography Hides Malware in Image Files

Posted by   Martijn Grooten on   Apr 28, 2016

A new paper by CYREN researcher Lordian Mosuela takes a close look at Gatak, or Stegoloader, a piece of malware that was discovered last year and that is controlled via malicious code embedded in a PNG image, a technique known as steganography.

Read more  

Paying a malware ransom is bad, but telling people never to do it is unhelpful advice

Posted by   Martijn Grooten on   Apr 26, 2016

The current ransomware plague is one of the worst threats the Internet has seen and it is unlikely to go away any time soon. But telling people to never pay the ransom is unhelpful advice.

Read more  

VB2015 paper: VolatilityBot: Malicious Code Extraction Made by and for Security Researchers

Posted by   Martijn Grooten on   Apr 22, 2016

In his VB2015 paper, Martin Korman presented his 'VolatilyBot' tool, which extracts malicious code from packed binaries, leveraging the functionality of the Volatility Framework.

Read more  

VB2016 programme announced, registration opened

Posted by   Martijn Grooten on   Apr 21, 2016

We have announced 37 papers (and four reserve papers) that will be presented at VB2016 in Denver, Colorado, USA in October. Registration for the conference has opened; make sure you register before 1 July to benefit from a 10% early bird discount.

Read more  

New tool helps ransomware victims indentify the malware family

Posted by   Martijn Grooten on   Apr 15, 2016

The people behind the MalwareHunterTeam have released a tool that helps victims of ransomware identify which of more than 50 families has infected their system, something which could help them find a tool to decrypt their files.

Read more  

It's fine for vulnerabilities to have names — we just need not to take them too seriously

Posted by   Martijn Grooten on   Apr 13, 2016

The PR campaign around the Badlock vulnerability backfired when it turned out that the vulnerability wasn't as serious as had been suggested. But naming vulnerabilities can actually be helpful and certainly shouldn't hurt.

Read more  

Throwback Thursday: The Number of the Beasts

Posted by   Helen Martin on   Apr 7, 2016

The Virus Bulletin Virus Prevalence Table, which ran from 1992 until 2013, gave users a regular snapshot of what was really going on in the virus (and later malware) world, recording the number of incidents of each virus reported to VB in the preceding month. In August 2000, Denis Zenkin, a self-confessed virus prevalence table junkie, shared his findings following a study of the virus prevalence tables over the preceding few years, allowing him to determine the top ten viruses of the period, the top viruses by type and the viruses of the year.

Read more  

Paper: All Your Meetings Are Belong to Us: Remote Code Execution in Apache OpenMeetings

Posted by   Martijn Grooten on   Mar 30, 2016

Security researcher Andreas Lindh recently found a vulnerability in Apache OpenMeetings that could allow remote code execution on a vulnerable server. Andreas reported the vulnerability to the OpenMeetings developers and, once it had been patched, he wrote up the details.

Read more  

Throwback Thursday: 'In the Beginning was the Word...'

Posted by   Helen Martin on   Mar 24, 2016

Word and Excel’s internal file formats used to be something in which few were interested – until macro viruses came along and changed all that. In 1996, Andrew Krukov provided an overview of the new breed of viruses.

Read more  

VB2016 Call for Papers Deadline

Posted by   Martijn Grooten on   Mar 18, 2016

You have until the early hours (GMT) of Monday 21 March to submit an abstract for VB2016! The VB2016 programme will be announced in the first week of April.

Read more  

Search blog

Hundreds of APTs linked to Chinese Army department

'Unit 61398' employs hundreds of people.
'Unit 61398' employs hundreds of people. A new report by security firm Mandiant links a large number of cyber-espionage cases to a department of the Chinese army. The report is… https://www.virusbulletin.com/blog/2013/02/hundreds-apts-linked-chinese-army-department/

Massive drop in PPI SMS spam after spammers fined

Levels still higher than for most of 2012.
Levels still higher than for most of 2012. Security firm Cloudmark has reported a significant drop in the amount of PPI (Payment Protection Insurance) spam sent via SMS in the UK… https://www.virusbulletin.com/blog/2013/02/massive-drop-ppi-sms-spam-after-spammers-fined/

EU to propose cybersecurity rules

Companies required to report breaches.
Companies required to report breaches. The European Union is due to set out a new set of cybersecurity rules tomorrow - in which companies including search engines, energy… https://www.virusbulletin.com/blog/2013/02/eu-propose-cybersecurity-rules/

Drop reported in infected computers worldwide

Nearly one third of computers still found to be infected.
Nearly one third of computers still found to be infected. The proportion of infected computers worldwide decreased from 38.49% in 2011 to 31.98% last year, according to an annual… https://www.virusbulletin.com/blog/2013/02/drop-reported-infected-computers-worldwide/

Happy Safer Internet Day

10th annual awareness day focuses on rights and responsibilities.
10th annual awareness day focuses on rights and responsibilities. Today (5th February) is Safer Internet Day 2013 across the world. Safer Internet Day (SID) is organised by the… https://www.virusbulletin.com/blog/2013/02/happy-safer-internet-day/

Impressive results in latest VBSpam test

Excellent performances in spam filter test - plus evidence of a correlation between spam 'passing' SPF and an increased delivery rate.
Excellent performances in spam filter test - plus evidence of a correlation between spam 'passing' SPF and an increased delivery rate. No fewer than ten anti-spam solutions… https://www.virusbulletin.com/blog/2013/02/impressive-results-latest-vbspam-test/

February issue of VB published

The February issue of Virus Bulletin is now available for subscribers to download.
The February issue of Virus Bulletin is now available for subscribers to download. The February 2013 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2013/02/february-issue-vb-published/

February

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2013/02/

Phone support scammers attempt repeat business

Previous victims contacted again and tricked into 'renewing' service.
Previous victims contacted again and tricked into 'renewing' service. Phone support scammers have found a new way to make easy money: by calling back people whom they have… https://www.virusbulletin.com/blog/2013/01/phone-support-scammers-attempt-repeat-business/

Avast launches bug bounty programme

Security firm offers reward for info on bugs.
Security firm offers reward for info on bugs. Security firm Avast Software, producer of the popular avast! free anti-virus solution, has announced a bug bounty programme to… https://www.virusbulletin.com/blog/2013/01/avast-launches-bug-bounty-programme/

VB2014 - location, location, location

Cat escapes bag as details of VB2014 conference are announced.
Cat escapes bag as details of VB2014 conference are announced. Keeping shtum about the dates and details for VB2014 - the 24th Virus Bulletin International Conference - has not… https://www.virusbulletin.com/blog/2013/01/location-location-location/

Indian government proposes pamphlet-based cybersecurity education

Mandatory brochures not welcomed by manufacturers.
Mandatory brochures not welcomed by manufacturers. In an attempt to raise public awareness of security issues, the Indian government has proposed a plan in which it will be… https://www.virusbulletin.com/blog/2013/01/indian-government-proposes-pamphlet-based-cybersecurity-education/

Anonymous petitions Obama Administration

Anti-virus and security related articles provided by independent anti-virus advisors, Virus Bulletin
"Make DDoS a legal form of protest." Hacking/protest group Anonymous has petitioned the Obama Administration to recognize DDoS attacks as a legal form of protest. The petition… https://www.virusbulletin.com/blog/2013/01/anonymous-petitions-obama-administration/

Cat carries computer virus

Cat collared.
Cat collared. Japanese police have captured a cat said to be carrying a computer virus on a memory card attached to its collar. The bizarre 'arrest' came after various Japanese… https://www.virusbulletin.com/blog/2013/01/cat-carries-computer-virus/

European Cybercrime Centre set for launch

Central cybercrime resource for EU member states.
Central cybercrime resource for EU member states. This Friday will see the doors of the new European Cybercrime Centre (EC3) officially open in The Hague. The EC3 - which will be… https://www.virusbulletin.com/blog/2013/01/european-cybercrime-centre-set-launch/

January issue of VB published

The January issue of Virus Bulletin is now available for subscribers to download.
The January issue of Virus Bulletin is now available for subscribers to download. The January 2013 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2013/01/january-issue-vb-published/

2013

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsBotconf - the 'first botnet fighting conference'Tools, ideas and research presented in Nantes. 10 December 2013VB2014: more of the same, plus something a little… https://www.virusbulletin.com/blog/2013/

January

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2013/01/

December

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2012/12/

December issue of VB published

The December issue of Virus Bulletin is now available for subscribers to download.
The December issue of Virus Bulletin is now available for subscribers to download. The December 2012 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2012/12/december-issue-vb-published/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.