A More 'Human' Koobface, a More Dangerous Facebook

[Peaches]

A More 'Human' Koobface, a More Dangerous Facebook

Notorious worm imitates normal user behavior

By Lucian Constantin, Web News Editor

11th of November 2009

Security researchers warn that the infamous Koobface social networking worm received and upgrade, which allows it to create and use Facebook accounts in a similar way a real person would. The new component also performs various checks in order not to arouse suspicion.

Koobface is a computer worm targeting the users of social networking websites. It spreads by hijacking or automatically creating bogus accounts and posting links to malicious web pages. The most common Koobface lure is the "intriguing video" trick, in which the user is enticed into visiting a malicious URL in order to see an online video.

However, on the landing page, the user is actually presented with an image mimicking an embedded video, which allegedly requires a special codec or Flash player upgrade to view. The executable server is actually the installer for the worm.

According to security researchers from antivirus vendor Trend Micro, a recent upgrade of the worm enhances it to automatically register Facebook accounts and activate them by visiting confirmation URLs sent to Gmail addresses, authenticate with the new account and join Facebook groups, as well as add new friends and post messages on their walls.

Full article details at softpedia - http://news.softpedi...ok-126745.shtml