Beware Of The New Facebook Virus – Koobface

by Lee on February 8, 2009

in Malware

A new virus is on the prowl and it’s looking to make contact with Facebook’s 120 million users.

Unsurprisingly, the virus is designed to acquire sensitive information, such as credit card details.

facebook-koobface-virus

Koobface

This new virus, named ‘Koobface‘, spreads itself by sending messages to inboxes whilst pretending to be from a Facebook friend.

The content of the email itself will appear to be enticing, complete with a link entitled ‘you look funny in this new video’ or something similar.

If you click on that link you could be forgiven for thinking that you really were being redirected to a video as you are then asked to watch a ’secret video by Tom’.

Attempting to play that video, however, will prompt a dialogue box to appear which tells the user that they need to download a more modern version of Adobe’s Flash Player.

That action is how the virus finds it’s way in.

Credit Card Theft

Once installed, the virus can then steal credit card details in one of two ways -

  • by waiting for the user to complete an online transaction and then storing the data or
  • by searching the host computer for cookies which may have retained credit card information from prior transactions

Remedies

Obviously, the best solution to ensure that you do not become infected with Koobface is to have a good, and updated, anti-virus program running.

Secondly, employ some common sense whilst using Facebook and be wary of what links you click on in emails.

Failing that, you can search your Windows directory for 2 files – tmark2.dat and mstre6.exe.

If either of those two files are present then you can safely delete them.

Update : Here is my guide on removing Koobface.

Related Posts

  • Koobface Virus Migrates From Facebook To Twitter
  • Ivan Macalintal (Trend Micro) On Koobface
  • Are Facebook And Microsoft Joining Forces To Tackle Koobface?
  • Facebook Messages Appearing To Link To FBAction.Net – Possible Phishing Site
  • What Exactly Is The Koobface Virus?
  • The Perfect Illustration Of What Koobface Can Do To Your Computer
  • 200 Million Facebook Users Targeted In Phishing Scam
  • Is Koobface Coming Back For More?
  • How Did The Koobface Worm Become Such A Dangerous Weapon?
  • How Can Facebook Groups Pose A Security Risk?
  • { 5 trackbacks }

    Ivan Macalintal (Trend Micro) On Koobface
    December 9, 2009 at 10:59 am
    How Can I Remove The Koobface Virus From My Computer?
    December 9, 2009 at 11:01 am
    How Did The Koobface Worm Become Such A Dangerous Weapon?
    December 15, 2009 at 1:06 pm
    The Perfect Illustration Of What Koobface Can Do To Your Computer
    March 14, 2010 at 9:56 am
    Facebook Messages Appearing To Link To FBAction.Net – Possible Phishing Site
    March 15, 2010 at 9:17 am

    { 6 comments… read them below or add one }

    1 ale alex December 10, 2009 at 5:06 pm

    you’re not infeced with a virus.
    you are tricked into running a trojan program.
    you have to be extremely stupid to actually RUN this program.

    a “good” anti-virus program is NO HELP if you are stupid enough to RUN malware programs. If antivirus-programs would have any significant protection (most user DO have GOOD antivirus programs) there would be no problem…and there REALLY are.

    why not just use your computer with other account than the one with root/administrator status?? that is extremely more protective than ANY other advices you would EVER get!

    Reply

    2 Lee December 14, 2009 at 2:49 pm

    Unfortunately it is my experience that the average internet user, whilst not typically stupid at all, would still run malware on their machine.

    I think, therefore, that education would probably be a better alternative to a good antivirus than merely saying be careful what you run.

    Reply

    3 hanum October 17, 2009 at 6:12 am

    I also infected facebook virus namely “vidyartha college facebook virus”. The collage students account name passwords and profile data on facebook are changed.

    Reply

    4 Mary February 9, 2009 at 7:27 am

    Thanks for the heads up, I’d not heard of this one.

    Reply

    5 Lee February 9, 2009 at 7:33 am

    You’re welcome Mary.

    Reply

    6 Lee October 17, 2009 at 11:17 pm

    I’m not too sure what you mean by that comment hanum???

    Reply

    Leave a Comment

    Previous post:

    Next post: