VB Blog

Consumer spyware: a serious threat with a different threat model

Posted by Martijn Grooten on Apr 25, 2017

Consumer spyware is a growing issue and one that can have serious consequences: its use is increasingly common in domestic violence. But do our threat models consider the attacker with physical access to, and inside knowledge of the victim?

Posted by Martijn Grooten on Apr 24, 2017

In their VB2016 paper, Stormshield researchers Benoît Ancel and Mehdi Talbi introduced Haka, an open-source language to monitor, debug and control malicious network traffic. Both their paper and the video recording of their presentation are now available to read/view on www.virusbulletin.com.

Posted by Martijn Grooten on Apr 13, 2017

We are proud to announce a very broad and very international programme for VB2017, which will take place in Madrid, 4-6 October 2017.

Posted by Martijn Grooten on Apr 10, 2017

Virus Bulletin is excited to announce John-Graham Cumming and Brian Honan as the two keynote speakers for VB2017 in Madrid.

Posted by Martijn Grooten on Mar 31, 2017

As VB's COO John Hawes moves on to new challenges, the team wish him a fond farewell and good luck in his future endeavours.

Posted by Martijn Grooten on Mar 28, 2017

Symantec researchers Himanshu Anand and Chastine Menrige explain how a single click can lead to a compromised machine, without malware ever being stored on disk.

Posted by Martijn Grooten on Mar 22, 2017

The Necurs botnet has started sending pump-and-dump spam. Almost all of these emails are blocked by spam filters, yet the stock price still increased.

Posted by Martijn Grooten on Mar 10, 2017

Realistically speaking, if your software or system uses the SHA-1 hashing algorithm, it is unlikely that it will be exploited in the foreseeable future. But it is also extremely difficult to be certain that your system won't be the exception.

Posted by Martijn Grooten on Mar 10, 2017

The call for papers for VB2017, which takes place 4 to 6 October in Madrid, Spain, is currently open. We're always on the look out for new speakers and new content, so to help anyone who's unfamiliar with the VB conference, we've prepared a list of answers to some frequently asked questions about the event, and about how to submit a paper.

Posted by Helen Martin on Mar 9, 2017

This week marked the 25th anniversary of the trigger date of the infamous Michelangelo virus. In January 1992, VB published an analysis of the boot sector virus that captured the imagination of the press and kicked up a media storm.

Previous1...3637383940...215Next

Search blog

Japanese super-spammer arrested

Tokyo man sent 2.2 billion emails.
Tokyo man sent 2.2 billion emails. A 25-year-old man was arrested in Tokyo last week, suspected of sending 2.2 billion spam emails. Yukio Shiina was picked up by police on Friday,… https://www.virusbulletin.com/blog/2008/02/japanese-super-spammer-arrested/

VB100 test on Windows Vista SP1 announced

Products to be tested on new update to Vista platform.
Products to be tested on new update to Vista platform. VB has issued a call for submissions for the latest VB100 comparative review, which will test the performance of products… https://www.virusbulletin.com/blog/2008/02/test-windows-vista-sp1-announced/

Microsoft research revives 'friendly worm' ideas

Malware techniques proposed as update-spreading method.
Malware techniques proposed as update-spreading method. A group of Microsoft researchers have put forward proposals to use worm techniques to spread patches and updates across… https://www.virusbulletin.com/blog/2008/02/microsoft-research-revives-friendly-worm-ideas/

Software and OS developers should take responsibility for security

While 51% of users say computer security should be the responsibility of the user, nearly a third of users feel it is up to software and OS developers.
While 51% of users say computer security should be the responsibility of the user, nearly a third of users feel it is up to software and OS developers. According to a recent poll,… https://www.virusbulletin.com/blog/2008/02/software-and-os-developers-should-take-responsibility-security/

Phishers phishing phishers' phishes

Scam software secretly sending stolen data to creators.
Scam software secretly sending stolen data to creators.Phishing researchers have uncovered code buried in phishing software kits, sold by developers to less technically aware… https://www.virusbulletin.com/blog/2008/02/phishers-phishing-phishers-phishes/

Meta-phishing

Phishing warning contains link to... phishing site.
Phishing warning contains link to... phishing site. The anti-malware industry can congratulate itself for there being an increasing awareness among users about phishing. Users are… https://www.virusbulletin.com/blog/2008/02/meta-phishing/

Trend vs. ClamAV patent row hots up

Free software advocates call for boycott of Trend.
Free software advocates call for boycott of Trend. With legal proceedings ongoing between Trend Micro and gateway appliance specialist Barracuda Networks, concerning Barracuda's… https://www.virusbulletin.com/blog/2008/02/trend-vs-clamav-patent-row-hots/

M&S joins high-street AV retail crowd

Upmarket store to match rivals in security software selling.
Upmarket store to match rivals in security software selling. Leading UK retailer Marks & Spencer (M&S) has joined fellow high-street chain Woolworths and supermarket leviathan… https://www.virusbulletin.com/blog/2008/02/m-amp-s-joins-high-street-av-retail-crowd/

Bumper Patch Tuesday short of one patch

Excel remains vulnerable as expected fix is dropped.
Excel remains vulnerable as expected fix is dropped.Microsoft has issued its monthly 'Patch Tuesday' set of security updates, with a larger than usual crop of patches for a variety… https://www.virusbulletin.com/blog/2008/02/bumper-patch-tuesday-short-one-patch/

Storm Valentines run under way

Seasonal spam and malware barrage gets going.
Seasonal spam and malware barrage gets going. The expected run of 'Storm' spams, pushing links to their latest line of malware disguised as Valentine's messages, has begun, with… https://www.virusbulletin.com/blog/2008/02/storm-valentines-run-under-way/

Over 1 per cent of search results include malicious sites

Google research paper confirms significant increase in number of malware-serving websites.
Google research paper confirms significant increase in number of malware-serving websites. Recent reports of increasing numbers of websites serving malicious content have been… https://www.virusbulletin.com/blog/2008/02/over-1-cent-search-results-include-malicious-sites/

More PDF exploits seen in wild

Adobe Reader and Acrobat flaws open way for further document attacks.
Adobe Reader and Acrobat flaws open way for further document attacks. A string of vulnerabilities in Adobe's PDF viewing and editing software, disclosed late last week by Adobe and… https://www.virusbulletin.com/blog/2008/02/more-pdf-exploits-seen-wild/

Live Mail CAPTCHA system bypassed

Spammers use botnet to register accounts on popular free webmail service.
Spammers use botnet to register accounts on popular free webmail service.Spammers have written a program that cracks the CAPTCHAS used by the Windows Live Mail registration system.… https://www.virusbulletin.com/blog/2008/02/live-mail-captcha-system-bypassed/

Complex attack targets Better Business Bureau

Sophisticated scam uses personalised mails, real site redirects.
Sophisticated scam uses personalised mails, real site redirects. A highly sophisticated email phishing scam is using a redirection flaw in the website of the Better Business Bureau… https://www.virusbulletin.com/blog/2008/02/complex-attack-targets-better-business-bureau/

FTC fines spammers over $2.5 million

Drug pushers busted for phony claims and CAN-SPAM breaches.
Drug pushers busted for phony claims and CAN-SPAM breaches. After a successful case brought by the US Federal Trade Commission (FTC), a pharmaceuticals firm and its head have been… https://www.virusbulletin.com/blog/2008/02/ftc-fines-spammers-over-2-5-million/

Yahoo! jukebox flaw exploits in wild

Zero day vulnerability in music system rapidly targeted.
Zero day vulnerability in music system rapidly targeted.Vulnerabilities in Yahoo! Jukebox, a free music-management system provided by Yahoo!, have been exploited by in-the-wild… https://www.virusbulletin.com/blog/2008/02/yahoo-jukebox-flaw-exploits-wild/

Fake security blogs lead to malware

Blogger sites play on fears to draw victims to porn, trojans.
Blogger sites play on fears to draw victims to porn, trojans. According to a report from Aladdin, numerous fake security blogs have been set up on the Google-owned Blogger blogging… https://www.virusbulletin.com/blog/2008/02/fake-security-blogs-lead-malware/

New security software testing standards body formed

AMTSO to promote cross-industry debate and higher standards in testing.
AMTSO to promote cross-industry debate and higher standards in testing. A collaborative group from across the security industry has officially been founded this week, aiming to… https://www.virusbulletin.com/blog/2008/02/new-security-software-testing-standards-body-formed/

419 scammers plead guilty in US

African trio admit attempts to defraud via spam.
African trio admit attempts to defraud via spam. Three men, two from Nigeria and a third from Senegal, entered guilty pleas in a Brooklyn, New York, courtroom last week after being… https://www.virusbulletin.com/blog/2008/02/419-scammers-plead-guilty-us/

February issue of VB published

The February issue of Virus Bulletin is now available for subscribers to download.
The February issue of Virus Bulletin is now available for subscribers to download. The February 2008 issue of Virus Bulletin is now available for subscribers to browse online or… https://www.virusbulletin.com/blog/2008/02/february-issue-vb-published/

« Previous 1...7172737475...121 Next »