⚠️ Malware / Trojaner / Viren

Shell:PHP/0wned.A

Phishing:PHP/Banking.Firstnational.A

Phishing pages for First National Bank

Flooder:PHP/Excess.A

Packet flooder "excess flooder"

Spam:PHP/Mailer.Zombbomber.A

Spam script "ZombBomber"

Spam:PHP/Mailer.Mailman.A

Phishing:PHP/Banking.Hsbc.A

Phishing pages for HSBC Banking

Shell:PHP/Nxs.A

Shell:PHP/Itsmyard.A

Phishing:PHP/Banking.Cooperative.A

Phishing pages for the Cooperative Bank

Shell:PHP/Mulcishell.A

Spam:PHP/Mailer.Advancedmailer.A

Spam script "AdvancedMailer"

Shell:PHP/R3v3ng4ns.A

Shell:PHP/Sansursansursansur.A

"sansursansursansur" shell

A first shot at false positives

Every so often an antivirus detecting a legitimate file hits the headlines, this usually happens when a given vendor mistakenly marks as malicious a…

VirusTotal += Alibaba

We welcome Alibaba engine to VirusTotal. This Chinese antivirus is focused in Android malware.

Digging deeper into JAR packages and Java bytecode

Before the Christmas break we announced the inclusion of a tool to further characterize Mac OS X executables and iPhone apps, at the same time we…

A closer look at Mac OS X executables and iOS apps

Virustotal has always been able to scan and provide verdicts for Mac OS X executables and iOS apps, these are just some…

VirusTotal += ALYac

We welcome ESTsoft ALYac engine to VirusTotal. This South Korean multi-engine antivirus includes its own engine called Tera plus the popular…

virustotal += Blueliv URL scanner

We are excited to announce that we have just integrated Blueliv's malicious URL tracker in virustotal, as yet one more URL scanner providing verdicts…

virustotal += Detailed ELF information

In computing, the Executable and Linkable Format (ELF, formerly called Extensible Linking Format) is a common standard file format for executables…

Tango down report of OP China ELF DDoS'er

This report is credited to the team work between MMD, CERT and fellow researchers involved.

virustotal += Baidu-International URL scanner

And we are in our sixties with respect to the number of URL scanning engines integrated in VirusTotal, welcome Baidu-International!

Another country-sponsored #malware: Vietnam APT Campaign

The background This is a team work analysis, we have at least 5 (five) members involved with this investigation.

virustotal += PhishLabs URL scanner

Yet another malicious URL dataset is joining virustotal today. Welcome PhishLabs.

Bad Code Entitles Good Exploits

I have yet to create a full taxonomy of the mistakes developers make that lead to insecure code.

Shikotan – the Kuril New Zealand.

If you’ve ever been to New Zealand, and then one day you were to wake up on Shikotan island (er, without knowing how you got there, or why were you…

Atsonupuri: The Aston Martin of volcanos

The Kurils are all volcanic. On the 56 islands that make up the archipelago there are a total of 68 volcanos, 36 of which are still smoking.

Under the hood – 2015.

We’ve a tradition here at KL (besides the summer birthday bashes, New Year shindigs and the rest, that is).

The Answer to the Ultimate Question of Life, the Universe, and Everything.

Many of you will know that the answer to the Ultimate Question of Life, the Universe, and Everything is 42. But no one – NO ONE!

Island No. 16: Simushir.

Here we are with more adventures on the Kuril Islands… Our expedition went like this: new day – new island.

Island No. 14: Ushishir.

Just a month ago I was unaware of one of the most amazing, enchanting and photogenic places on the planet. Now I know.

Brainteasers – August 26, 2014.

In July, KL turned 17! The occasion was marked in typical fanfare style, and gave us the chance to see in the last full year of our adolescence – by…

Super fly guy.

Just recently I was flying over Baghdad, accompanied by my traveling companion, A.Sh. We were on Etihad EY53 from Abu Dhabi to Geneva. A.Sh.

Mumbairport.

Continuing the airport theme… Holy moly! This is one ultra-modern, cavernous travel hub. It resembles more a museum than an airport.

Chek Lap Kok: No quick walk.

Flying round the globe as I do, I get to see all sorts of different destinations, a lot of different airports too.

virustotal += OpenPhish URL scanner

We keep increasing the number of engines integrated in virustotal's URL scanning backbone. Today is the turn of OpenPhish.