VB Blog

VB2016 paper: BlackEnergy – what we really know about the notorious cyber attacks

Posted by   Martijn Grooten on   Jul 3, 2017

According to some researchers, there is some evidence linking the recent (Not)Petya attacks with the BlackEnergy group - which became infamous for its targeted attacks against the Ukraine. At VB2016, ESET researchers Anton Cherepanov and Robert Lipovsky spoke about BlackEnergy, providing an overview of the group's attacks. Today, we publish their paper.

Read more  

Security advice in the wake of WannaCry and Not(Petya)

Posted by   Martijn Grooten on   Jun 30, 2017

As WannaCry and (Not)Petya have shown, malware attacks can do a lot of damage. So is staying safe just a case of following good security advice?

Read more  

48 hours after initial reports, many mysteries remain around the latest ransomware/wiper threat

Posted by   Martijn Grooten on   Jun 29, 2017

Whether you call it Petya, NotPetya, Nyetya or Petna, there are still many mysteries surrounding the malware that has been causing havoc around the world.

Read more  

VB2017 Early Bird discount to expire this week

Posted by   Martijn Grooten on   Jun 28, 2017

This week, the Early Bird discount for VB2017 comes to an end - so, for a 10% saving on the cost of full price registration, make sure you register now!

Read more  

VB2016 paper: Steam stealers: it's all fun and games until someone's account gets hijacked

Posted by   Martijn Grooten on   Jun 23, 2017

Last year, Kaspersky Lab researcher Santiago Pontiroli and PwC's Bart Parys presented a VB2016 paper analysing the malicious threats faced by users of the Steam online gaming platform, and highlighting how organized criminals are making money with these profitable schemes. Today, we publish the paper.

Read more  

Research paper shows it may be possible to distinguish malware traffic using TLS

Posted by   Martijn Grooten on   Jun 22, 2017

Researchers at Cisco have published a paper describing how it may be possible to use machine learning to distinguish malware command-and-control traffic using TLS from regular enterprise traffic, and to classify malware families based on their encrypted C&C traffic.

Read more  

Is CVE-2017-0199 the new CVE-2012-0158?

Posted by   Martijn Grooten on   Jun 20, 2017

After five years of exploitation in a wide variety of attacks, CVE-2012-0158 may have found a successor in CVE-2017-0199, which is taking the Office exploit scene by storm.

Read more  

Review: BSides London 2017

Posted by   Martijn Grooten on   Jun 19, 2017

Virus Bulletin was a proud sponsor of BSides London 2017 - Martijn Grooten reports on a great event.

Read more  

VB2017: one of the most international security conferences

Posted by   Martijn Grooten on   Jun 15, 2017

It is well known that the problem of cybersecurity is a global one that affects users worldwide - but it's also one that has some unique local flavours. With speakers representing at least 24 countries, VB2017 is one of the most international security conferences on the circuit, allowing attendees to hear the viewpoints of experts from around the world. Register before 1 July and receive a 10% Early Bird discount.

Read more  

VB2016 paper: Diving into Pinkslipbot's latest campaign

Posted by   Martijn Grooten on   Jun 12, 2017

Qakbot or Qbot, is a banking trojan that makes the news every once in a while and was the subject of a VB2016 paper by Intel Security researchers Sanchit Karve, Guilherme Venere and Mark Olea. In it, they provided a detailed analysis of the Pinkslipbot/Qakbot trojan and its then latest campaign. Their full paper is now available to download or read online.

Read more  

Search blog

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/08/

Supply of data to spammers stopped

Database thief charged.
Database thief charged. A US man has been charged with stealing a database of US physicians with the intention of selling it on to spammers. Forty-six-year-old William Bailey, Jr… https://www.virusbulletin.com/blog/2006/08/supply-data-spammers-stopped/

More on the XP comparative

Setting the record straight.
Setting the record straight. In VB's June 2006 comparative review it was reported that the Norman product behaved badly, with repeated crashes on dealing with infected or… https://www.virusbulletin.com/blog/2006/08/more-xp-comparative/

Sysinternals goes the Microsoft way

Microsoft acquires company behind the Sysinternals range of freeware tools.
Microsoft acquires company behind the Sysinternals range of freeware tools.Microsoft announced the acquisition last month of privately held Winternals Software LP - the company… https://www.virusbulletin.com/blog/2006/08/sysinternals-goes-microsoft-way/

False positive reduction

Amendment to VB's June Windows XP comparative review.
Amendment to VB's June Windows XP comparative review. In Virus Bulletin's June 2006 Windows XP comparative review (see VB, June 2006, p.11), VB reported that Alwil's product… https://www.virusbulletin.com/blog/2006/07/false-positive-reduction/

July issue of VB published

The July issue of Virus Bulletin is now available for subscribers to download.
The July issue of Virus Bulletin is now available for subscribers to download. The July 2006 issue of Virus Bulletin is now available for subscribers to browse online or download… https://www.virusbulletin.com/blog/2006/07/july-issue-vb-published/

New faces

VB welcomes new Technical Consultant.
VB welcomes new Technical Consultant. VB is pleased to announce the arrival of a new team member. Following the departure of Matt Ham last month, John Hawes is joining us to take… https://www.virusbulletin.com/blog/2006/07/new-faces/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/07/

m00p group members arrested

Three members of virus-writing gang held.
Three members of virus-writing gang held. Three members of a malware-writing group were arrested last month following investigations in Finland and the UK. The three men - a… https://www.virusbulletin.com/blog/2006/07/m00p-group-members-arrested/

Big bucks

AV software revenues increase.
AV software revenues increase. Anti-virus software revenues reached $4 billion worldwide last year - an increase of 13.6% on the previous year - according to industry analyst… https://www.virusbulletin.com/blog/2006/07/big-bucks/

Phone phishes

Watch out for fake SMS messages.
Watch out for fake SMS messages. A sneaky new phishing technique emerged last month, in which initial contact is made with victims via SMS text message. In the attack, an SMS… https://www.virusbulletin.com/blog/2006/07/phone-phishes/

Symantec vulnerability discovered - and fixed

Buffer overflow vulnerability found in corporate AV software.
Buffer overflow vulnerability found in corporate AV software.Symantec was quick to respond late last month to the discovery of a potentially critical vulnerability in the latest… https://www.virusbulletin.com/blog/2006/06/symantec-vulnerability-discovered-and-fixed/

Blue Frog croaks but may rise again

Open source project to create anti-spam opt-out tool based on the defunct Blue Frog service.
Open source project to create anti-spam opt-out tool based on the defunct Blue Frog service. Last month, Blue Frog, the anti-spam service offered by Blue Security, was forced to… https://www.virusbulletin.com/blog/2006/06/blue-frog-croaks-may-rise-again/

June issue of VB published

The June issue of Virus Bulletin is now available for subscribers to download.
The June issue of Virus Bulletin is now available for subscribers to download. The June 2006 issue of Virus Bulletin is now available for subscribers to browse online or download… https://www.virusbulletin.com/blog/2006/06/june-issue-vb-published/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2006/06/

OneCare goes live

Microsoft anti-virus goes on general release.
Microsoft anti-virus goes on general release.Microsoft's anti-virus software Windows Live OneCare is due to go on general release this month. OneCare, which has been available… https://www.virusbulletin.com/blog/2006/06/onecare-goes-live/

Bank takes steps to increase customer security

Bank signs deal with AV vendor in an attempt to stop phishers in their tracks.
Bank signs deal with AV vendor in an attempt to stop phishers in their tracks. In an attempt to prevent online banking fraud, a British bank has signed a deal with Finnish… https://www.virusbulletin.com/blog/2006/06/bank-takes-steps-increase-customer-security/

Gone phishing in Japan

Japan's first crackdown on organized phishing.
Japan's first crackdown on organized phishing. Police in Kyoto have arrested eight men in Japan's first crackdown on organized phishing. The men are suspected of belonging to a… https://www.virusbulletin.com/blog/2006/06/gone-phishing-japan/

Spam papers available

Organizers of the 2006 Spam Conference encourage you to get reading.
Organizers of the 2006 Spam Conference encourage you to get reading. Papers and slides from the 2006 Spam Conference held at the end of March are now available online. The… https://www.virusbulletin.com/blog/2006/05/spam-papers-available/

Security survey and checklist

Attempt to gain better understanding of the costs of computer security incidents.
Attempt to gain better understanding of the costs of computer security incidents. Businesses in the US have been urged to complete a survey issued jointly by the US Departments of… https://www.virusbulletin.com/blog/2006/05/security-survey-and-checklist/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.