The Facebook Virus Spreads: No Social Network is Safe
Written by Sarah Perez December 11, 2008 6:27 AM
"Koobface" is the name of the Trojan worm that's been making its way through the social networking site Facebook lately, but to the site's users, it's been simply known as "the Facebook virus." That name will soon become a misnomer, though, because the worm is now spreading outside of Facebook's walls to attack other social networks like Bebo, MySpace, Friendster, MyYearbook, and Blackplanet.
About Koobface
Once a computer has become infected with the Kooface worm, it spams the friends belonging to the owner of the computer by leaving comments on their profiles. Those comments appear to come from the infected user, saying things like "Are you sure this is your first acting experience?", "is it u there?", "impressive. i'm sure it's you on this video", "How can anyone get so busted by a spy camera?" and "You're the whole show! i'm admired with you." Save for that last one, whose bad English will likely raise a flag that all is not what it seems, the other comments appeal to people's vanity. They wonder: is that really a video of me? and then click through on the link provided.
The link actually takes them to an off-site page which pretends to offer a video download from "YuoTube," but then stalls saying that you'll need a new version of Adobe's Flash Player installed in order to continue. Of course, if you click the button to proceed with the install, you're infected. Infected users are then directed to even more contaminated web sites when they try to use search engines, which puts them at risk of identity theft, among other things. "Search terms are directed to find-www.net," said McAfee's Craig Schmugar, and that "enables ad hijacking and click fraud."
...