Koobface Makes A Comeback

A new round of e-mails aimed at launching the koobface worm onto the PCs of unsuspecting users has been discovered by researchers for the security vendor ESET, according to the company’s blog.  This latest Koobface campaign is sending Facebook users messages with a link that claims to direct them to videos of sexual encounters, then tells the user to download a video codec to view the X-rated content.  Instead of delivering the goods, the link launches the koobface malware, infecting its intended victim.  Once infected, the worm then triggers the malicious message to all of their contacts.

The dangerous download occurs only the first time someone clicks on the link.  After that, it brings up a “Page not found” error to make detection and sample capture difficult.  To protect yourself from koobface, ESET offers the usual advice.  Don’t trust this new message or any like it sent to you via social networks like Facebook.  And of course, make sure your antivirus software is always up-to-date.

My wife has me testing out a new FREE product on Facebook and my blog called Defensio, and was acquired by WebSense 2 years ago.  It’s a spam blocker, malicious content detection/filtering, content and profanity filter, and even offers code injection protection.  I’m trying figure out how to get it to work with this blog.  We’ll see if I have any luck.