Koobface, the infamous worm, was first detected by Kaspersky Lab as Net-Worm.Win32.Koobface, and it instantly became popular when it appeared almost one year ago targeting Facebook and MySpace accounts. The Koobface worm is spreading through a legitimate user's account to their friends' profiles. Comments and messages sent by the worm contain a link to a fake YouTube style website which invites users to download a "new version of Flash Player". The worm, rather than a media player, is then downloaded to victim machines. Once a user is infected, he or she will start spreading such messages to his or her friends. In the meantime, the functionality of the worm has been extended. Koobface is now targeting more social networking websites like Facebook, MySpace, Hi5, Bebo, Tagged, Netlog and, most recently, Twitter.
As social networks such as Facebook or Twitter are becoming increasingly popular (Facebook Alexa Ranking), attacks targeting them are also gaining momentum.
Tips for Users:
Kaspersky Lab users running any of the Company's current anti-malware products are fully protected from all known variants of Net-Worm.Win32.Koobface. Kaspersky Lab's global team of analysts are keeping a close eye on all threats coming from the social networking space, monitoring the malicious activity and constantly updating the protection customers receive.
Stefan Tanase, Malware Researcher Kaspersky Lab
"This sign of increased cybercriminal activity involving social networks in the past month proves that the strategies being used by the bad guys to infect users are much more efficient when adding the social context to their attacks. June 2009 marks an important milestone in the evolution of social networking malware: the activity we've seen this month exceeds by far any other month in the past."
About Kaspersky Lab Kaspersky Lab delivers the world's most immediate protection against IT security threats, including viruses, spyware, crimeware, hackers, phishing, and spam. Kaspersky Lab products provide superior detection rates and the industry's fastest outbreak response time for home users, SMBs, large enterprises and the mobile computing environment. Kaspersky' technology is used worldwide inside the products and services of the industry's leading IT security solution providers. Learn more at www.kaspersky.com. For the latest on antivirus, anti-spyware, anti-spam and other IT security issues and trends, visit www.viruslist.com.
Christen Rice Corporate PR Specialist Kaspersky Lab Americas