Virus Bulletin - October 2009


Editor: Helen Martin

Technical Consultant: John Hawes

Technical Editor: Morton Swimmer

Consulting Editors: Ian Whalley, Nick FitzGerald, Richard Ford, Edward Wilding

2009-10-01


Comment

Social networking meets social engineering

'Just when we thought things couldn’t get any more volatile, along came social networking.' Jeff Aboud, In-Focus Marketing.

Jeff Aboud - In-Focus Marketing, USA

News

More phish

Recent reports show phishing still on the rise.

Helen Martin - Virus Bulletin, UK

DHS to recruit security professionals

1,000 security professionals sought.

Helen Martin - Virus Bulletin, UK

Security Essentials causes stir

Microsoft's new release sparks debate.

Helen Martin - Virus Bulletin, UK

Malware prevalence report

August 2009

The Virus Bulletin prevalence table is compiled monthly from virus reports received by Virus Bulletin; both directly, and from other companies who pass on their statistics.


Malware analysis

Flying solo

Continuing his series of analyses of viruses contained in the EOF-rRlf-DoomRiderz virus zine, Peter Ferrie looks at a virus named ‘Pilot’.

Peter Ferrie - Microsoft, USA

Conference reports

Geneva convention

Ears still ringing from the sound of yodelling and (to a lesser degree) jet planes, Helen Martin reflects on VB2009 - one of VB's biggest conferences to date.

Helen Martin - Virus Bulletin, UK

7th German Anti Spam Summit 2009

Sorin Mustaca reports on the 7th German Anti Spam Summit.

Sorin Mustaca - Avira, Germany

Features

Anti-phishing landing page: turning a 404 into a teachable moment

Ponnurangam Kumaraguru and colleagues describe a collaborative project between the Anti-Phishing Working Group and Carnegie Mellon University that aims to educate users about the dangers of phishing by displaying an educational message in place of phishing sites that have been taken down.

Ponnurangam Kumaraguru - Institute of Information Technology Delhi, India, Lorrie Faith Cranor - Carnegie Mellon University, USA & Laura Mather - Anti-Phishing Working Group, USA

An update on spamming botnets: are we losing the war?

Marios Kokkodis and Michalis Faloutsos present the results of an empirical study of spamming activity, discussing the temporal spreading of spammers across the IP space and illustrating the evolution of high-activity spamming IP spaces.

Marios Kokkodis - University of California Riverside, USA & Michalis Faloutsos - University of California Riverside, USA

Comparative review

Windows Server 2008 Standard Edition SP2 x86

This month VB's test team put 26 products to the test on Windows Server 2008. John Hawes has the full results.

John Hawes - Virus Bulletin

Calendar

Anti-malware industry events

Must-attend events in the anti-malware industry - dates, locations and further details.


 

Latest articles:

Throwback Thursday: The Thin Blue Line

In 1994, UK Fraud Squad detectives started making inroads into the most puzzling 'Whodunnit' since the Great Train Robbery. Had an outbreak of computer crime swept Britain? No, it was all part of a police training program.

VB2015 paper: Effectively testing APT defences: defining threats, addressing objections to testing, and suggesting some practical approaches

As targeted attacks gain more attention, and protection developers pay more attention to the implementation of new defensive technologies, the need arises for the testing of product efficacy with respect to this new kind of threat. However, compared…

Throwback Thursday: Peter-II - Three Questions of The Sphinx (July 1993)

How much does a user really need to know in order to defend his computer from computer viruses? In 1993, the latest news from the anti-viral battle-front was that if the user wanted to defend the contents of his computer from viral attack, he should…

VB2015 paper: The ethics and perils of APT research: an unexpected transition into intelligence brokerage

Information security researchers are increasingly finding themselves involved in investigating state-sponsored or geopolitically significant threats. In his VB2015 paper, Juan Andrés Guerrero-Saade looks at the perils and ethical conundrums involved…

VB2015 paper: Digital ‘Bian Lian’ (face changing): the Skeleton Key malware

When the Skeleton Key malware is installed on a domain controller, the attacker can play a face-changing trick on the domain by logging in as any user it chooses and performing any number of actions on the system including, but not limited to,…