Category: blog

  • VB2018 paper: Lazarus Group: a mahjong game played with different sets of tiles

    The Lazarus Group, generally linked to the North Korean government, is one of the most notorious threat groups of recent years. It has engaged in digital espionage, destructive attacks and financially motivated attacks, and was probably the most discussed threat group at VB2018 in Montreal. One of the Lazarus-related papers at VB2018 was written by…

  • Book your VB2019 ticket now for a chance to win a ticket for BSides London

    At Virus Bulletin , we have a particular fondness for the BSides community events, half a dozen of which we have attended in various locations around the world. And because our own conference ( VB2019 ) takes place in London this year, we are proud to be a sponsor of the BSides London event, which…

  • Book your VB2019 ticket now for a chance to win a ticket for BSides London

    At Virus Bulletin , we have a particular fondness for the BSides community events, half a dozen of which we have attended in various locations around the world. And because our own conference ( VB2019 ) takes place in London this year, we are proud to be a sponsor of the BSides London event, which…

  • First 11 partners of VB2019 announced

    The Virus Bulletin Conference is all about bringing the security community together to share intelligence and move the industry forward, but we wouldn’t be able to do any of this without the support of our partners. Today, we are pleased to announce the first 11 partners of VB2019. Partnering the conference at Platinum level we…

  • First 11 partners of VB2019 announced

    The Virus Bulletin Conference is all about bringing the security community together to share intelligence and move the industry forward, but we wouldn’t be able to do any of this without the support of our partners. Today, we are pleased to announce the first 11 partners of VB2019. Partnering the conference at Platinum level we…

  • VB2018 paper: Fake News, Inc.

    “Fake news” is a term that was little used just a handful of years ago, yet by 2017 it had become so prominent in our everyday vocabulary that it was awarded the honour of the Collins Dictionary ‘s ” word of the year “. fake news ( ˌfeɪk ˈnjuːz ) noun: false, often sensational, information…

  • VB2018 paper: Fake News, Inc.

    “Fake news” is a term that was little used just a handful of years ago, yet by 2017 it had become so prominent in our everyday vocabulary that it was awarded the honour of the Collins Dictionary ‘s ” word of the year “. fake news ( ˌfeɪk ˈnjuːz ) noun: false, often sensational, information…

  • Paper: Alternative communication channel over NTP

    The use of DNS as a covert C&C communication channel has been widely documented and is fairly prevalent in the wild. Last week, Palo Alto Networks analysed its use in the various tools of Iran’s OilRig (APT34) group. But DNS is not unique in this. As long ago as 2006, ICMP packets were being used…

  • Paper: Alternative communication channel over NTP

    The use of DNS as a covert C&C communication channel has been widely documented and is fairly prevalent in the wild. Last week, Palo Alto Networks analysed its use in the various tools of Iran’s OilRig (APT34) group. But DNS is not unique in this. As long ago as 2006, ICMP packets were being used…

  • VB2019 conference programme announced

    We are excited to announce the programme for VB2019 , the 29th International Virus Bulletin Conference which will take place 2-4 October in London, UK. The conference programme features a mix of analyses of the threats that companies and organisations, nations and individuals are facing; of the tools and technologies used to analyse those threats;…