What do MySpace and Facebook users have in common with Paris Hilton?

Our sister site, AccountingWEB.co.uk reports that MySpace and Facebook users are being targeted with variants of a new worm that is being propagated via bogus comments that direct them to infected websites, according to security specialist Kapersky Lab.

Unsuspecting networkers who follow the links could end up downloading the Koobface worm which can co-opt their computers into an e-mail zombie botnet.

Net-Worm.Win32.Koobface.a is spread via MySpace while Win32.Koobface.b targets Facebook users. Both viruses create spam messages and send them to an infected user's friends with comments such as:

  • Paris Hilton Tosses Dwarf On The Street
  • Examiners Caught Downloading Grades From The Internet
  • Hello; You must see it!!! LOL. My friend catched you on hidden cam

The messages and comments include links to a fake YouTube-like site, where the user is asked if he or she wants to download the latest version of Adobe's Flash Player. Instead, the download installs a file called codesetup.exe to the victim machine to propagate the worm.

The Koobface worm confirms warnings from earlier in the year that online networking sites such as Facebook and MySpace would be targeted by hackers.

"Unfortunately users are very trusting of messages left by 'friends' on social networking sites. So the likelihood of a user clicking on a link like this is very high," said Alexander Gostev, senior virus analyst at Kaspersky Lab.

"At the beginning of 2008 we predicted that we'd see an increase in cybercriminals exploiting MySpace, Facebook and similar sites, and we're now seeing evidence of this. I'm sure that this is simply the first step, and that virus writers will continue to target these resources with increased intensity."

 

You may like these other stories...

How are you planning? What tools do you use (or fail to use) for forecasting? PlanGuru is a business budgeting, forecasting, and performance review software company based in White Plains, N.Y. AccountingWEB recently spoke...
Event Date: October 30, 2014, 2 pm ETMany Excel users have a love-hate relationship with workbook links. For the uninitiated, workbook links allow you to connect one Microsoft Excel spreadsheet to other spreadsheets, Word...
Event Date: September 9, 2014, 2:00 pm ETIn this session we'll discuss the types of technologies and their uses in a small accounting firm office. Included will be:The networked office: connecting everything together for...

Already a member? log in here.

Upcoming CPE Webinars

Aug 26
This webcast will include discussions of recently issued, commonly-applicable Accounting Standards Updates for non-public, non-governmental entities.
Aug 28
Excel spreadsheets are often akin to the American Wild West, where users can input anything they want into any worksheet cell. Excel's Data Validation feature allows you to restrict user inputs to selected choices, but there are many nuances to the feature that often trip users up.
Sep 9
In this session we'll discuss the types of technologies and their uses in a small accounting firm office.
Sep 11
This webcast will include discussions of commonly-applicable Clarified Auditing Standards for audits of non-public, non-governmental entities.