VB Blog

Paper: How It Works: Steganography Hides Malware in Image Files

Posted by   Martijn Grooten on   Apr 28, 2016

A new paper by CYREN researcher Lordian Mosuela takes a close look at Gatak, or Stegoloader, a piece of malware that was discovered last year and that is controlled via malicious code embedded in a PNG image, a technique known as steganography.

Read more  

Paying a malware ransom is bad, but telling people never to do it is unhelpful advice

Posted by   Martijn Grooten on   Apr 26, 2016

The current ransomware plague is one of the worst threats the Internet has seen and it is unlikely to go away any time soon. But telling people to never pay the ransom is unhelpful advice.

Read more  

VB2015 paper: VolatilityBot: Malicious Code Extraction Made by and for Security Researchers

Posted by   Martijn Grooten on   Apr 22, 2016

In his VB2015 paper, Martin Korman presented his 'VolatilyBot' tool, which extracts malicious code from packed binaries, leveraging the functionality of the Volatility Framework.

Read more  

VB2016 programme announced, registration opened

Posted by   Martijn Grooten on   Apr 21, 2016

We have announced 37 papers (and four reserve papers) that will be presented at VB2016 in Denver, Colorado, USA in October. Registration for the conference has opened; make sure you register before 1 July to benefit from a 10% early bird discount.

Read more  

New tool helps ransomware victims indentify the malware family

Posted by   Martijn Grooten on   Apr 15, 2016

The people behind the MalwareHunterTeam have released a tool that helps victims of ransomware identify which of more than 50 families has infected their system, something which could help them find a tool to decrypt their files.

Read more  

It's fine for vulnerabilities to have names — we just need not to take them too seriously

Posted by   Martijn Grooten on   Apr 13, 2016

The PR campaign around the Badlock vulnerability backfired when it turned out that the vulnerability wasn't as serious as had been suggested. But naming vulnerabilities can actually be helpful and certainly shouldn't hurt.

Read more  

Throwback Thursday: The Number of the Beasts

Posted by   Helen Martin on   Apr 7, 2016

The Virus Bulletin Virus Prevalence Table, which ran from 1992 until 2013, gave users a regular snapshot of what was really going on in the virus (and later malware) world, recording the number of incidents of each virus reported to VB in the preceding month. In August 2000, Denis Zenkin, a self-confessed virus prevalence table junkie, shared his findings following a study of the virus prevalence tables over the preceding few years, allowing him to determine the top ten viruses of the period, the top viruses by type and the viruses of the year.

Read more  

Paper: All Your Meetings Are Belong to Us: Remote Code Execution in Apache OpenMeetings

Posted by   Martijn Grooten on   Mar 30, 2016

Security researcher Andreas Lindh recently found a vulnerability in Apache OpenMeetings that could allow remote code execution on a vulnerable server. Andreas reported the vulnerability to the OpenMeetings developers and, once it had been patched, he wrote up the details.

Read more  

Throwback Thursday: 'In the Beginning was the Word...'

Posted by   Helen Martin on   Mar 24, 2016

Word and Excel’s internal file formats used to be something in which few were interested – until macro viruses came along and changed all that. In 1996, Andrew Krukov provided an overview of the new breed of viruses.

Read more  

VB2016 Call for Papers Deadline

Posted by   Martijn Grooten on   Mar 18, 2016

You have until the early hours (GMT) of Monday 21 March to submit an abstract for VB2016! The VB2016 programme will be announced in the first week of April.

Read more  

Search blog

January issue of VB published

The January issue of Virus Bulletin is now available for subscribers to download.
The January issue of Virus Bulletin is now available for subscribers to download. The January 2010 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2010/01/january-issue-vb-published/

2010

Latest news from the anti-virus industry provided by independent anti-virus advisors, Virus Bulletin
NewsHefty Patch Tuesday bulletin rounds off bumper yearNo sign of an end to vulnerability glut. 15 December 2010Chinese whispers of malware writing and bribery in the industryAs… https://www.virusbulletin.com/blog/2010/

January

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2010/01/

Botnets becoming more robust

Zeus botnet used Amazon's in-the-cloud service to control bots.
Zeus botnet used Amazon's in-the-cloud service to control bots. New reports by MessageLabs and McAfee show that botherders have learned a lesson following the take-down of McColo… https://www.virusbulletin.com/blog/2009/12/botnets-becoming-more-robust/

Project Honey Pot 'celebrates' billionth spam message

Facebook about to become most phished organization.
Facebook about to become most phished organization. Few people would celebrate receiving a billion spam messages, but those at Project Honey Pot must have been a little proud when… https://www.virusbulletin.com/blog/2009/12/project-honey-pot-celebrates-billionth-spam-message/

Next VB100 comparative announced

SUSE test to challenge Linux products.
SUSE test to challenge Linux products. The latest round of VB100 testing has been announced, with a comparative to be run on Novell's SUSE Linux Enterprise Server 11 in January.… https://www.virusbulletin.com/blog/2009/12/next-comparative-announced/

False positive problem hits avast! users

Human failure blamed for faulty update.
Human failure blamed for faulty update. A relatively small subsection of the massive user base for Alwil's ever-popular avast! products were hit by a string of false positives last… https://www.virusbulletin.com/blog/2009/12/false-positive-problem-hits-avast-users/

IE zero-day bug fixed in Patch Tuesday updates

Serious browser bug main feature of monthly alerts, Adobe Flash issue also patched.
Serious browser bug main feature of monthly alerts, Adobe Flash issue also patched.Microsoft has released the December Patch Tuesday security bulletin, with a total of six alerts.… https://www.virusbulletin.com/blog/2009/12/ie-zero-day-bug-fixed-patch-tuesday-updates/

VB100 update

Post-test analysis corrects results for MS Forefront, CA.
Post-test analysis corrects results for MS Forefront, CA. In the wake of the mammoth VB100 comparative released earlier this week, the lab team have been conducting thorough… https://www.virusbulletin.com/blog/2009/12/update/

December

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2009/12/

Legal success against notorious spammers

Atkinson to pay huge fine; Ralsky to spend years in prison.
Atkinson to pay huge fine; Ralsky to spend years in prison. US judges have sentenced two notorious spammers to a huge fine and years of imprisonment, respectively. Yesterday, a US… https://www.virusbulletin.com/blog/2009/12/legal-success-against-notorious-spammers/

December issue of VB published

The December issue of Virus Bulletin is now available for subscribers to download.
The December issue of Virus Bulletin is now available for subscribers to download. The December 2009 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2009/12/december-issue-vb-published/

AV-Comparatives releases latest retrospective figures

Half of products rated top-class in proactive detection testing.
Half of products rated top-class in proactive detection testing. Independent testing lab AV-Comparatives has released its latest set of results, the semi-annual retrospective test… https://www.virusbulletin.com/blog/2009/11/av-comparatives-releases-latest-retrospective-figures/

VB calls for collaboration amongst anti-spam vendors

VB finds that, when it comes to spam filtering, a combined effort outperforms individual products.
VB finds that, when it comes to spam filtering, a combined effort outperforms individual products. Virus Bulletin has discovered that running several spam filters in combination… https://www.virusbulletin.com/blog/2009/11/vb-calls-collaboration-amongst-anti-spam-vendors/

ICSA Labs report reveals testing details

Certification issues unmasked in 20-year lab survey.
Certification issues unmasked in 20-year lab survey. Renowned testing and certification group ICSA Labs has released a fascinating report drawing back the curtain on its security… https://www.virusbulletin.com/blog/2009/11/icsa-labs-report-reveals-testing-details/

Fortinet announces IPO

Gateway specialist releases share price projections.
Gateway specialist releases share price projections. Security firm Fortinet has announced its floatation on the Nasdaq stock market, the first IT security company to launch an IPO… https://www.virusbulletin.com/blog/2009/11/fortinet-announces-ipo/

Anti-spam products do well in VB testing

VB announces anti-spam certification results.
VB announces anti-spam certification results.Virus Bulletin has announced that 12 products earned VBSpam awards in its latest round of comparative anti-spam testing. A total of 14… https://www.virusbulletin.com/blog/2009/11/anti-spam-products-do-well-vb-testing/

November issue of VB published

The November issue of Virus Bulletin is now available for subscribers to download.
The November issue of Virus Bulletin is now available for subscribers to download. The November 2009 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2009/11/november-issue-vb-published/

November

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2009/11/

AV-Comparatives publishes malware removal test

16 products challenged to remove selection of tricky infections.
16 products challenged to remove selection of tricky infections. Independent testing body AV-Comparatives has published its latest set of test results, a comparison of how well… https://www.virusbulletin.com/blog/2009/10/av-comparatives-publishes-malware-removal-test/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.