Facebook 'Koobface' Malware Gang Unmasked -- Sophos Releases Exclusive Research
Investigation uncovers identities of the alleged perpetrators
January 17, 2012
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt850556f866500627/654a5a8e05eb4d040a046894/325351_DR23_Graphics_General_Large_Text_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
PRESS RELEASE
Following media reports last night that Facebook has identified five people as responsible for the Koobface worm, IT security and data protection firm Sophos releases its independent and exclusive research into the Koobface gang, identifying the same alleged perpetrators as Facebook: Anton Korotchenko, Alexander Koltyshev, Roman Koturbach, Syvatoslav Polinchuk, and Stanislav Avdeiko.
SophosLabs malware expert Dirk Kollberg and independent researcher Jan Droemer worked with an extensive team across the industry. In this exclusive, Droemer and Kollberg share a wealth of findings, including the perpetrators' nicknames, online activities, physical locations and business dealings:
http://nakedsecurity.sophos.com/koobface/
Koobface (an anagram of "Facebook") spreads via social networking sites, infecting PCs and building a botnet of compromised computers. It is so sophisticated it can even create its own social networking accounts, so that it can aggressively post links helping it to spread further.
The creators of Koobface, whose names have not been public until today, earn millions of dollars every year by compromising computers.
Droemer and Kollberg's research took place between October 2009 and February 2010, but the authorities requested that it be kept confidential to allow them the necessary time to build a case.
"It's an incredible detective story of tireless investigation, which involved scouring the Internet, searching company records and taking advantage of schoolboy social networking errors made by the suspected criminals, their friends and family. We know the gang's names, their phone numbers, where their office is, what they look like, what cars they drive, even their mobile phone numbers," said Graham Cluley, senior technology consultant at Sophos. "Now, we have to wait and see what, if any, action the authorities will take against the Koobface gang."
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024