Kaspersky Labs has detected two new variants of a worm, Networm.Win32.Koobface.a. and Networm.Win32.Koobface.b, that attack users of MySpace and Facebook respectively. As a result, worms convert the computers of victims in zombie machines that comes part of a botnet network.
Although worms only attack users of MySpace and Facebook, Kaspersky Lab experts warn that are designed to download additional malicious code across the Internet. It is very likely that infected machines are used not only for sending links across social networks, but also be used for other purposes equally malicious.
NetWorm.Win32.Koobface.a spreads when a user accesses his account on MySpace and from that moment, the worm creates a series of comments and messages distributed to all your contacts. For its part, Net-Worm.Win32.Koobface.b attacks Facebook users and send spam messages to the list of friends of the person whose machine had been infected.
The messages and comments submitted through MySpace and Facebook are very striking and include a link to Youtube. [Skip]. Pl. If the recipient clicks on this link, is redirected to http / / youtube. [Skip]. Ru, a website which allegedly contains a video clip. But when trying to watch the video, a message in which it warns that there is a need to download the latest version of Flash Player and, when trying to do is download a network worm called codesetup.exe. As a result, users who have accessed the Web through Facebook have downloaded the worm attacking MySpace, and vice versa.
“Unfortunately, users rely too much on the messages they receive from their friends in social networks, thus the likelihood that click on a link is very high,” says Alexander Gostev, an analyst at Kaspersky Virus Labs. “Early 2008, which would target an increase in attacks on these networks, like MySpace and Facebook, and now this is evidence. I am convinced that this is only the first step and that the creators of viruses continue to exploit these networks with greater intensity. “
