VirusBulletin – Page 3 – Computer Security Articles

In a paper presented at VB2019 in London, researchers fron the Financial Security Institute detailed the tools and activities used by the APT group ‘Kimsuky’, some of which they were able to analyse through OpSec failures by the group. Today, we publish their paper.

Magazine Security VirusBulletin

VB2019 paper: Play fuzzing machine – hunting iOS and macOS kernel vulnerabilities automatically and smartly

March 17, 2020 admin

In a paper presented at VB2019 in London, Trend Micro researchers Lilang Wu and Moony Li explained how the hunt for vulnerabilities in MacOS and iOS operating systems can be made both smarter and more automatic. Today we publish both their paper and the recording of their presentation.

Magazine Security VirusBulletin

VB2019 paper: Finding drive-by rookies using an automated active observation platform

March 17, 2020 admin

In a last-minute paper presented at VB2019 in London, Rintaro Koike (NTT Security) and Yosuke Chubachi (Active Defense Institute, Ltd) discussed the platform they have built to automatically detect and analyse exploit kits. Today we publish the recording of their presentation.

Magazine Security VirusBulletin

VB2019 paper: Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation state adversary

March 2, 2020 admin

The activities of China-based threat actor PKPLUG were detailed in a VB2019 paper by Palo Alto Networks researcher Alex Hinchliffe, who described the playbook of this long-standing adversary. Today we publish both Alex’s paper and the recording of his presentation.

Magazine Security VirusBulletin

VB2019 paper: Static analysis methods for detection of Microsoft Office exploits

February 25, 2020 admin

Today we publish the VB2019 paper and presentation by McAfee researcher Chintan Shah in which he described static analysis methods for the detection of Microsoft Office exploits.

Magazine Security VirusBulletin

New paper: LokiBot: dissecting the C&C panel deployments

February 17, 2020 admin

First advertised as an information stealer and keylogger when it appeared in underground forums in 2015, LokiBot has added various capabilities over the years and has affected many users worldwide. In a new paper researcher Aditya Sood analyses the URL structure of the LokiBot C&C panels and how they have evolved over time.

Magazine Security VirusBulletin

VB2019 presentation: Building secure sharing systems that treat humans as features not bugs

February 14, 2020 admin

In a presentation at VB2019 in London, Virtru’s Andrea Limbago described how, by exploring data sharing challenges through a socio-technical lens, it is possible to make significant gains toward the secure sharing systems and processes that are vital for innovation and collaboration. Today we release the recording of her presentation.

Magazine Security VirusBulletin

VB2019 presentation: Attor: spy platform with curious GSM fingerprinting

February 11, 2020 admin

Attor is a newly discovered cyber-espionage platform, use of which dates back to at least 2014 and which focuses on diplomatic missions and governmental institutions. Details of Attor were presented at VB2019 in London by ESET researcher Zuzana Hromcová. Today we release the recording of Zuzana’s presentation.