VB Blog

VB2018 paper: Unpacking the packed unpacker: reversing an Android anti-analysis library

Posted by   Martijn Grooten on   Jan 14, 2019

Today, we publish a VB2018 paper by Google researcher Maddie Stone in which she looks at one of the most interesting anti-analysis native libraries in the Android ecosystem. We also release the recording of Maddie's presentation.

Read more  

VB2018 paper: Draw me like one of your French APTs – expanding our descriptive palette for cyber threat actors

Posted by   Martijn Grooten on   Jan 7, 2019

Today, we publish the VB2018 paper by Chronicle researcher Juan Andres Guerrero-Saade, who argues we should change the way we talk about APT actors.

Read more  

Book Review: Cyber Wars

Posted by   Martijn Grooten on   Dec 19, 2018

VB Editor Martijn Grooten reviews Charles Arthur's Cyber Wars, which looks at seven prominent hacks and attacks, and the lessons we can learn from them.

Read more  

VB2018 paper: Office bugs on the rise

Posted by   Martijn Grooten on   Dec 14, 2018

At VB2018 Sophos researcher Gábor Szappanos provided a detailed overview of Office exploit builders, and looked in particular at the widely exploited CVE-2017-0199. Today we publish his paper and release the video of his presentation.

Read more  

VB2018 video: The Big Bang Theory by APT-C-23

Posted by   Martijn Grooten on   Dec 12, 2018

Today, we release the video of the VB2018 presentation by Check Point researcher Aseel Kayal, who connected the various dots relating to campaigns by the APT-C-23 threat group.

Read more  

VB2019 London - join us for the most international threat intelligence conference!

Posted by   Martijn Grooten on   Dec 11, 2018

VB calls on organisations and individuals involved in threat intelligence from around the world to participate in next year's Virus Bulletin conference.

Read more  

VB2018 paper: Tracking Mirai variants

Posted by   Martijn Grooten on   Dec 7, 2018

Today, we publish the VB2018 paper by Qihoo 360 researchers Ya Liu and Hui Wang, on extracting data from variants of the Mirai botnet to classify and track variants.

Read more  

VB2018 paper: Hide'n'Seek: an adaptive peer-to-peer IoT botnet

Posted by   Martijn Grooten on   Dec 6, 2018

2018 has seen an increase in the variety of botnets living on the Internet of Things - such as Hide'N'Seek, which is notable for its use of peer-to-peer for command-and-control communication. Today, we publish the VB2018 paper by Bitdefender researchers Adrian Șendroiu and Vladimir Diaconescu, who studied the Hide'N'Seek IoT botnet. We also release the recording of their presentation.

Read more  

New paper: Botception: botnet distributes script with bot capabilities

Posted by   Martijn Grooten on   Dec 4, 2018

In a new paper, Avast researchers Jan Sirmer and Adolf Streda look at how a spam campaign sent via the Necurs botnet was delivering the Flawed Ammyy RAT. As well as publishing the paper, we have also released the video of the reseachers' VB2018 presentation on the same topic.

Read more  

VB2018 video: Behind the scenes of the SamSam investigation

Posted by   Martijn Grooten on   Nov 29, 2018

Today we have published the video of the VB2018 presentation by Andrew Brandt (Sophos) on the SamSam ransomware, which became hot news following the indictment of its two suspected authors yesterday.

Read more  

Search blog

Questionable false positive file removed

Amendment to VB's April Linux comparative review.
Amendment to VB's April Linux comparative review. In Virus Bulletin's April 2007 Linux comparative review (see VB, April 2007, p.11), VB reported that ESET's product NOD32 had… https://www.virusbulletin.com/blog/2007/05/questionable-false-positive-file-removed/

Touchy mail blocker upsets Gay

Content filter berates woman for using own name in mails.
Content filter berates woman for using own name in mails. A woman has complained to the New Zealand ISP Telecom after an email she sent them was bounced back to her, with a message… https://www.virusbulletin.com/blog/2007/05/touchy-mail-blocker-upsets-gay/

Botnet DoS no longer profitable

Extortion attacks fall as herders find easier money elsewhere.
Extortion attacks fall as herders find easier money elsewhere. The use of armies of botnets to carry out denial-of-service attacks on lucrative websites, as a method of extorting… https://www.virusbulletin.com/blog/2007/05/botnet-dos-no-longer-profitable/

DoS attacks support political unrest

Estonia rioting backed up by attacks on government websites.
Estonia rioting backed up by attacks on government websites. Severe rioting in Estonia, sparked by anger over the removal of a Russian monument from a prominent war memorial, has… https://www.virusbulletin.com/blog/2007/05/dos-attacks-support-political-unrest/

Massive lawsuit brought against spam harvesters

Harvesting detection project aims to prosecute address abusers.
Harvesting detection project aims to prosecute address abusers. A community project dedicated to gathering information on the collection of email addresses for spamming purposes… https://www.virusbulletin.com/blog/2007/05/massive-lawsuit-brought-against-spam-harvesters/

Email this!

VB stops spammer in his tracks.
VB stops spammer in his tracks. A stark reminder of the ingenuity of spammers was received by VB's web team last month thanks to a brief incident involving the VB web server.… https://www.virusbulletin.com/blog/2007/05/email/

A new generation of Panda

Panda sells majority shareholding.
Panda sells majority shareholding. Spanish security vendor Panda Software has announced the sale of 75% of its shareholding to southern European investment group Investindustrial… https://www.virusbulletin.com/blog/2007/05/new-generation-panda/

VB100 procedure review

Test procedures clarified.
Test procedures clarified.VB has reviewed the test procedures for the VB100 comparative testing and certification program. An updated version of the VB100 procedures document is… https://www.virusbulletin.com/blog/2007/05/procedure-review/

May issue of VB published

The May issue of Virus Bulletin is now available for subscribers to download.
The May issue of Virus Bulletin is now available for subscribers to download. The May 2007 issue of Virus Bulletin is now available for subscribers to browse online or download… https://www.virusbulletin.com/blog/2007/05/may-issue-vb-published/

Erratum: VB100 Linux comparative

Dr.Web results corrected.
Dr.Web results corrected. Upon closer analysis of the latest set of VB100 test results (see VB, April 2007, p.11) VB has regrettably discovered some errors in the detection figures… https://www.virusbulletin.com/blog/2007/05/erratum-linux-comparative/

Websense snaps up SurfControl

$400m for British web-filtering company.
$400m for British web-filtering company. US firm Websense has sealed a $400m cash deal to acquire British web-filtering company SurfControl. The 700-pence-per-share price paid by… https://www.virusbulletin.com/blog/2007/05/websense-snaps-surfcontrol/

May

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2007/05/

Google advert exploit attack analysed

Video demonstrates malware infiltration via ads for legitimate sites.
Video demonstrates malware infiltration via ads for legitimate sites. Details continue to emerge of a serious attack using the Google Adwords advertising system to lure… https://www.virusbulletin.com/blog/2007/05/google-advert-exploit-attack-analysed/

Experts predict no let-up in malcode development

Kaspersky and Russinovich warn of growth in Vista, non-Windows malware.
Kaspersky and Russinovich warn of growth in Vista, non-Windows malware. Security experts have been making predictions for the future of malware and anti-malware developments, with… https://www.virusbulletin.com/blog/2007/04/experts-predict-no-let-malcode-development/

Governments making moves to combat cybercrime

Laws and agencies beginning to target online fraud and ID theft.
Laws and agencies beginning to target online fraud and ID theft. With profits from fraud using privileged personal data stolen via phishing or spyware rocketing and making the… https://www.virusbulletin.com/blog/2007/04/governments-making-moves-combat-cybercrime/

Theft spam, fraud and web threats may rival ad spam

Spring threat reports show rise in spying, zombies, spear-phishing and cracked websites.
Spring threat reports show rise in spying, zombies, spear-phishing and cracked websites. A series of reports released in recent weeks, surveying the latest developments in spam and… https://www.virusbulletin.com/blog/2007/04/theft-spam-fraud-and-web-threats-may-rival-ad-spam/

McAfee VirusScan vulnerability found, patched

Multibyte character overflow issue breaches on-access defences.
Multibyte character overflow issue breaches on-access defences. A vulnerability has been reported in the on-access component of McAfee's flagship VirusScan product, which could be… https://www.virusbulletin.com/blog/2007/04/mcafee-virusscan-vulnerability-found-patched/

Latest VB100 comparative announced

Windows XP products to be tested for June issue.
Windows XP products to be tested for June issue. VB has announced the next round of VB100% comparative testing, to be run on the Microsoft Windows XP platform. Submissions of… https://www.virusbulletin.com/blog/2007/04/latest-comparative-announced/

Mobile-to-human virus scare hits Asian nations

Rumours of killer mobile malware travel from Pakistan to Afghanistan.
Rumours of killer mobile malware travel from Pakistan to Afghanistan. The effects of a possible prank which sparked considerable public panic in one country have travelled to a… https://www.virusbulletin.com/blog/2007/04/mobile-human-virus-scare-hits-asian-nations/

Worms exploiting Windows DNS flaw

Zero-day vulnerability quickly used to transmit attacks.
Zero-day vulnerability quickly used to transmit attacks. The zero-day vulnerability in Microsoft's DNS server service, reported last week just after the release of the monthly… https://www.virusbulletin.com/blog/2007/04/worms-exploiting-windows-dns-flaw/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.