Facebook and MySpace attacked by new worms

Share this article:

New worms attacking social networking sites Facebook and MySpace have been uncovered.

The worms, Net-Worm.Win32.Koobface.a. and Net-Worm.Win32.Koobface.b, target MySpace and Facebook respectively, say security firm Kaspersky Lab, which found the threats.

The worms are designed to upload malicious modules with other functionality via the web. It's likely that they will turn target machines into zombie computers to form botnets.

Net-Worm.Win32.Koobface.a spreads when a user accesses their MySpace account and creates a range of comments that are sent to friends' accounts. On Facebook, Net-Worm.Win32.Koobface.b creates spam messages and sends them to the infected users' friends on the website.

Headlines such as “Paris Hilton Tosses Dwarf On The Street” and “Examiners Caught Downloading Grades From The Internet” are typically used to encourage users to click on a bogus video link that tells them to download a so-called new version Flash Player. This acts as a disguise for codesetup.exe, which installs malware.

“Unfortunately, users are very trusting of messages left by “friends” on social networking sites," said Alexander Gostev, senior virus analyst at Kaspersky Lab. "So the likelihood of a user clicking on a link like this is very high.

“At the beginning of 2008 we predicted that we'd see an increase in cybercriminals exploiting MySpace, Facebook and similar sites, and we're now seeing evidence of this," he added. "I'm sure that this is simply the first step, and that virus writers will continue to target these resources with increased intensity."

It is highly probable that victim machines will not only be used for spreading links via these social networking sites, but the botnets will also be used for other malicious purposes, according to Kaspersky Lab.

 

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Popular Science served up Rig Exploit Kit on its website

The monthly science magazine served up malicious code to readers earlier this week and has remedied the issue.

Deloitte releases paper on vetting leaks, avoiding costly hoax

Deloitte releases paper on vetting leaks, avoiding costly ...

The research presents techniques for distinguishing legit data leaks from false claims.

Attack on White House systems breached unclassified networks

The White House experienced a sustained cyberattack on its systems that impacted its network for nearly two weeks.