Koobface Threatens Facebook Users Again

Facebook users are targeted with the latest version of the famous Koobface worm, which is spearing widely across the popular social network. Security researches from ESET had found that messages promising erotic videos are promoting this threat.

Koobface worm arrives in the form of a message from a friend claiming to show an erotic video captured by a hidden camera (Figure 1). Hmmm, sounds interesting, isn`t it?

Figure 1. Phony Video Screen

When user tries to view the clip, a screen with the following text appears: "Video posted by .... Hidden camera ..." . A fake information message is asking the user to update his Flash player:

"Adobe flash player update. This content requires Adobe Flash Player 10.37. Would you like to install it now?"

Of course, there is no such thing like player update. If someone clicks "Install" button,the Koobface worm will be activated. It will send copies of the same viral message to all of his friends, while turning full control of his computer over to the attackers. All sensitive information found on the infected computer, including online account passwords, secret documents and pictures, will be exposed to the remote attackers. The affected PC will remain under the control of hackers who can use it to spread spam, or to invade in a company network, if the infected computer is a member of one.

Be cautious when receiving messages containing links or attachments even from your friends and people you know. It is not them who are sending the malware to you. It is the criminals that have control over their computers and accounts. Please, be extremely cautious and don`t rely only on your antivirus software to keep you from cyber threats.