The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1
Latest posting
By rating
By popularity

25 Jun The Day The Stuxnet Died Costin Raiu

11 Jan Techfest Mumbai 2011 Costin Raiu

13 Nov Happy Friday 13th! Aleks

14 Apr It's all in the number Eugene

Join our blog

You can contribute to our blog if you have +100 points. Comment on articles and blogposts, and other users will rate your comments. You receive points for positive ratings.


Deep inside one of Stuxnet’s configuration blocks, a certain 8 bytes variable holds a number which, if read as a date, points to June 24th, 2012. This is actually the date when Stuxnet’s LNK replication sub-routines stop working and the worm stops infecting USB memory sticks.

Events|Techfest Mumbai 2011

Costin Raiu
Kaspersky Lab Expert
Posted January 11, 05:36  GMT
Tags: Conferences, Exhibitions, Numerology, Trainings

Last week I got the chance to drop by the IIT campus in Mumbai, India, for the Techfest 2011 conference.

Follow me on Twitter This was a great opportunity to meet some of the world’s brightest students and to listen to some very interesting lectures from people such as Richard Stallman – who needs no introduction, William Baker – the structural engineer for the famous Burj Khalifa, KS Pua – the inventor of the pen drive, or Jaap Haartsen, the engineer who developed the Bluetooth specification. For a full lineup of the speakers, you can go here: http://www.techfest.org/lectures/

Opinions|Happy Friday 13th!

Kaspersky Lab Expert
Posted November 13, 12:57  GMT
Tags: History of Malware, Numerology

Happy Friday 13th!

Friday 13th! If you're at all superstitious, today is bad news. But for those of us in the antivirus industry, Friday 13th is a special day.

It's not an officially recognized holiday, and of course we're not taking the day off: we're here 24/7/365. But Friday 13th is when we remember when and why the antivirus industry really started...

22 years ago, in October 1987, a new file virus which infected COM and EXE files was identified in Jerusalem. Like similar, earlier programs, it was able to self-replicate, but it also had an additional, malicious payload which triggered on Friday 13th: when an attempt was made to run any program, the program file would be deleted, and DOS would say that the file couldn't be found. This meant that any file called using the Exec function got deleted.

The virus spread widely (even though neither the Internet or email had really caught on at that stage) on disks which got passed around and BBS.
13th May 1998 was D-day: thousands of messages about the virus started pouring in from around the world, and particularly from the US, Europe, and the Middle East. Jerusalem had become one of the first MS-DOS viruses to cause a pandemic.

The virus had managed to spread unnoticed to thousands of computers: antivirus software wasn't commonly used, and lots of people simply didn't believe that computer viruses were real. And it was in the same year that Peter Norton, a guru of the computing world, said that computer viruses were an urban legend, comparing them to the crocodiles which supposedly live in the sewers of New York. (This bold statement didn't deter Symantec, however, from developing its own antivirus software – Norton Anti-Virus.)

It was a watershed: new companies developing antivirus software started appearing, most of them of the "two men and a dog" variety. The antivirus programs themselves were nothing more than the simplest scanners which used contextual search to detect unique strings of virus code. "Immunizers" were popular too; these modified programs so that malware would think the programs were already infected, and not "re-infect" them.

Jerusalem's malicious payload went beyond deleting files: dozens of other viruses appeared which also had payloads designed to trigger on Friday 13th. Not surprisingly, those in the computer world started to associate Friday 13th with viruses; some people thought it was safer not to switch a computer on when the fateful date cycled round, and some altered the date on their machines, to the 12th or the 14th. The virus writers picked up on this and started playing the same game, producing "Thursday 12th" and "Saturday 14th" viruses.

As for us – well, today we want to wish everyone in the antivirus industry a happy Friday 13th! Yes, we have our differences - in ideology, philosophy, opinion and market share. But let's remember what we have in common, and why we're in this game in the first place. If we can't do that – then what are we doing here?

Comment      Link

Humour|It's all in the number

Kaspersky Lab Expert
Posted April 14, 17:11  GMT
Tags: Numerology

Ah, numbers: there are simple numbers, magic numbers, lucky numbers and unlucky numbers. There are people who are scared of numbers, people who don't understand numbers, people who love numbers, and people who ignore numbers. Me...I love numbers and always pay attention to how they sound and taste.

Yesterday some of us got on a flight to Boston from NYC. As the computer produced my boarding pass, I watched the numbers unfold and saw that this was a special day: number 13 was the name of the game.

13 - the date
13 - the flight number - with the 2 and 0 voided by the 20 in the gate number
13 - the boarding time


3 + A in hexadecimal is 3 + 10 =13

Four 13s on one boarding pass!! Wow - I'm amazed I survived! How did I do it, you might ask if you happen to believe in the bad luck 13 brings?

I don't know: maybe it was because the flight departed at 200P or APR 2008 =14 if you add the digits in that line. And finally, it was my 14th flight of the year, not the 13th.

So, I survived and I'm completing this US tour with a day in Boston. Flight number 15 of the year will be tomorrow and I'll be looking at new numbers.

Comment      Link