« President Obama’s cybersecurity | Main | Anti-malware expert and CEO, Eugene Kaspersky, talks about cybercrime »
Koobface worms attacking social networks
By karen | July 8, 2009
As social networks become a mainstay, attacks targeting them continue to gain momentum.
The Koobface worms (over 575 new variants identified):
• Net-Worm.Win32.Koobface.a
• Net-Worm.Win32.Koobface.b
• Net-Worm.Win32.Koobface.c
• Etc
Targeted social networking websites (detected):
• Facebook
• MySpace
• Hi5
• Bebo
• Tagged
• Netlog
• Twitter
The Koobface worms come through social networks and transform victims’ machines into zombie computers to form botnets.
It spreads through the legitimate user’s account to their friends. Comments and messages sent by the worm contain a link to a fake YouTube style website which invites users to download a “new version of Flash Player”. The worm, rather than the Flash Player, is then downloaded to the victim’s machine. Once a user is infected, he or she will start spreading such messages to his or her friends.
The worms are designed to upload additional malicious modules via the Internet. It is highly probable that victim machines will not only be used for spreading links via these social networking sites, but the botnets will also be used for other malicious purposes, such as gathering personal information then taping into bank accounts or committing fraud.
Kaspersky Lab discovered the worm and detected these threats on July 31, 2008. “At the beginning of 2008 we predicted that we’d see an increase in cyber-criminals exploiting MySpace, Facebook and similar sites, and we’re now seeing evidence of this. I’m sure that this is simply the first step, and that virus writers will continue to target these resources with increased intensity,” says Alexander Gostev, Senior Virus Analyst at Kaspersky Lab.
Tips for Users:
- Be cautious when opening links coming through suspicious messages, even if the sender is one of your trusted Facebook friends.
- Use either Internet Explorer 8 running in protected mode or Firefox with NoScript installed.
- Divulge as little personal information as possible. Do not give out your home address, phone number or other private details.
- Keep your antivirus software updated to prevent new versions of malware from attacking your computer.
Topics: Helpful Resources, blog home, karen lodrick's blog |
Comments
You must be logged in to post a comment.