Tag: vb2016

  • VB2016 paper: APT reports and OPSEC evolution, or: these are not the APT reports you are looking for

    Ever since Mandiant released its APT1 report four years ago, reports on advanced attack groups have been an important fixture in the security industry. These reports are great for gaining an understanding of how such groups operate and, as a not insignificant aside, a nice PR exercise for the companies that publish them. However, one…

  • VB2016 paper: APT reports and OPSEC evolution, or: these are not the APT reports you are looking for

    Ever since Mandiant released its APT1 report four years ago, reports on advanced attack groups have been an important fixture in the security industry. These reports are great for gaining an understanding of how such groups operate and, as a not insignificant aside, a nice PR exercise for the companies that publish them. However, one…

  • VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

    If you are going to be at RSA in San Francisco next week, we highly recommend you attend Patrick Wardle’s talk on OS X malware in 2016 – not just because it is important for Mac users to know that they too can fall victim to malware, but also because Patrick is an excellent speaker. We…

  • VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

    If you are going to be at RSA in San Francisco next week, we highly recommend you attend Patrick Wardle’s talk on OS X malware in 2016 – not just because it is important for Mac users to know that they too can fall victim to malware, but also because Patrick is an excellent speaker. We…

  • VB2016 video: Nymaim: the Untold Story

    Every year, the Virus Bulletin conference programme includes a number of ‘last-minute’ papers: presentations on topics that are so hot, they are added to the programme only a few weeks before the start of the conference. While the short time frame means there isn’t enough time to add an accompanying written paper to the conference…

  • VB2016 video: Nymaim: the Untold Story

    Every year, the Virus Bulletin conference programme includes a number of ‘last-minute’ papers: presentations on topics that are so hot, they are added to the programme only a few weeks before the start of the conference. While the short time frame means there isn’t enough time to add an accompanying written paper to the conference…

  • VB2016 video: Neverquest: Crime as a Service and On the Hunt for the Big Bucks

    Earlier this month, Spanish police officers arrested a Russian national on suspicion of creating the Neverquest banking trojan. Neverquest, also known as Vawtrak, is one of the most prevalent banking trojans of the moment, so while the arrest might not have a significant impact on cybercrime overall, it is good news: it sends the important message…

  • VB2016 video: Neverquest: Crime as a Service and On the Hunt for the Big Bucks

    Earlier this month, Spanish police officers arrested a Russian national on suspicion of creating the Neverquest banking trojan. Neverquest, also known as Vawtrak, is one of the most prevalent banking trojans of the moment, so while the arrest might not have a significant impact on cybercrime overall, it is good news: it sends the important message…

  • VB2016 paper: Great crypto failures

    “More malware is using cryptography, and more malware is using better cryptography,” said Check Point researcher Yaniv Balmas on stage during VB2016. While the increased use of cryptography in general in recent years has been a great development, it is rather frustrating to find malware authors having joined the bandwagon – with ransomware being the ultimate…

  • VB2016 paper: Great crypto failures

    “More malware is using cryptography, and more malware is using better cryptography,” said Check Point researcher Yaniv Balmas on stage during VB2016. While the increased use of cryptography in general in recent years has been a great development, it is rather frustrating to find malware authors having joined the bandwagon – with ransomware being the ultimate…