White Papers

94 reports

Windows Exploitation in 2015

Windows Exploitation in 2015

A new version of our earlier report on major trends in Windows exploitation and mitigation for 2015.


Is Anti-Virus dead?

Is Anti-Virus dead?

Is Anti-Virus dead?


Unpack Your Troubles: .NET packer tricks countermeasures

Unpack Your Troubles: .NET packer tricks countermeasures

Nowadays, .NET samples are increasingly common, necessitating specialized techniques for processing and analysis, especially when obfuscation is used: .NET packers have many tricks up their sleeves, but fortunately we do too.


Operation Liberpy’: Keyloggers and information theft in Latin America

Operation Liberpy’: Keyloggers and information theft in Latin America

Operation Liberpy’: Keyloggers and information theft in Latin America


Operation Potao Express: Analysis of a cyber-espionage toolkit

Operation Potao Express: Analysis of a cyber-espionage toolkit

Operation Potao Express: Analysis of a cyber-espionage toolkit


CPL Malware in Brazil: Somewhere Between Banking Trojans and Malicious Emails

CPL Malware in Brazil: Somewhere Between Banking Trojans and Malicious Emails

CPL Malware in Brazil: Somewhere Between Banking Trojans and Malicious Emails


Dissecting Linux/Moose

Dissecting Linux/Moose

The Analysis of a Linux Router-based Worm Hungry for Social Networks


Unboxing Linux/Mumblehard

Unboxing Linux/Mumblehard

Linux/Mumblehard is a family of malware targeting servers running both the Linux and BSD operating systems.


Windows 10 patching process may leave enterprises vulnerable to zero-day attacks

Windows 10 patching process may leave enterprises vulnerable to zero-day attacks

Microsoft recently announced its new patch roll-out strategy for the latest incarnation of the Windows operating system. Aryeh Goretsky considers how the Windows 10 patching process might affect both the enterprise and the home user. Goretsky, A. Windows 10 patching process may leave enterprises vulnerable to zero-day attacks, March 2015, Virus Bulletin. Copyright is held by Virus Bulletin Ltd, but is made available on this site for personal use free of charge by permission of Virus Bulletin.