Bulletin

An indispensable source of reference for anyone concerned with computer security, the Bulletin is the forum through which leading security researchers publish the latest security research and information in a bid to share knowledge with the security community. Publications cover the latest threats, new developments and techniques in the security landscape, opinions from respected members of the industry, and more. The Bulletin archives offer informative articles going back to 1989. Our editorial team is happy to hear from anyone interested in submitting a paper for publication.

VB2015 paper: The ethics and perils of APT research: an unexpected transition into intelligence brokerage

Juan Andrés Guerrero-Saade (Kaspersky Lab)

Information security researchers are increasingly finding themselves involved in investigating state-sponsored or geopolitically significant threats. In his VB2015 paper, Juan Andrés Guerrero-Saade looks at the perils and ethical conundrums involved…

Read more  

VB2015 paper: Modelling the Network Behaviour of Malware to Block Malicious Patterns. The Stratosphere Project: A Behavioural IPS

Current malware traffic detection solutions work mostly by using static fingerprints, white and black lists and crowd-sourced threat intelligence analytics. These methods are useful for detecting known malware in real time, but are insufficient…

Read more  

VB2015 paper: Digital ‘Bian Lian’ (face changing): the Skeleton Key malware

Chun Feng (Microsoft)
Tal Be'ery (Microsoft)
Stewart McIntyre (Dell SecureWorks)

When the Skeleton Key malware is installed on a domain controller, the attacker can play a face-changing trick on the domain by logging in as any user it chooses and performing any number of actions on the system including, but not limited to,…

Read more  

Throwback Thursday: I say Virus, You say Trojan (January 1998)

In January 1998, VB Technical Editor Jakub Kaminski asked: If trojans seem to be more dangerous than viruses, why don’t anti-virus vendors tackle those too?

Read more  

VB2015 paper: POS Fraud Trends and Counter-Actions to Mass Fraud

Ken Dunham (iSIGHT Partners)

Point-of-Sale (POS) e-crime fraud was of little discussion until the fall of 2013. Since then, a large number of retail stores in the US have announced major breaches. The number of infected organizations is in the thousands, with credit card…

Read more  

VB2015 paper: It's A File Infector... It’s Ransomware... It's Virlock

Vlad Craciun (Bitdefender)
Andrei Nacu (Bitdefender)
Mihail Andronic (Bitdefender)

Win32.Virlock, with all its variations, is both a new kind of file infector and a piece of ransomware (screen-locker) at the same time. In this paper, we aim to cover the techniques used by this virus and discuss methods that can be used to detect…

Read more  

VB2015 paper: Sizing Cybercrime: Incidents and Accidents, Hints and Allegations

Stephen Cobb (ESET)

Cybercrime certainly feels like a major threat to the security of networked systems upon which so much of daily life depends in the world today. Criminals routinely use digital networks to steal data, defraud companies and consumers, and disrupt…

Read more  

VB2015 paper: The Evolution of Ransomware: From CryptoWall to CTBLocker

Christy Chung (Fortinet)
Neo Tan (Fortinet)

The CryptoLocker ransomware was first discovered in late 2013. Millions of computers were infected, billions of files were encrypted, and millions of dollars’ worth of ransom was collected within several months. It caught a lot of researchers’…

Read more  

VB2014 paper: Tech Support Scams 2.0: An inside look into the evolution of the classic Microsoft tech support scam

Jérôme Segura (Malwarebytes)

Tech support scams have been around for a long time, and despite all the attention they have received, they are only getting worse. Scammers are diversifying - no longer just using the Microsoft cold-calling technique but now also using deceptive ads…

Read more  

VB2014 paper: Evolution of Android exploits from a static analysis tools perspective

Anna Szalay (Sophos)
Jagadeesh Chandraiah (Sophos)

With Android being the fastest-growing mobile OS, and with a rapidly increasing number of Android malware samples in existence, it is important to acknowledge the risk of exploitation of security vulnerabilities by malware. In their VB2014 paper,…

Read more  

Search the Bulletin


Bulletin Archive