Threat Center Security News Over 20,000 variations of Koobface virus haunting Facebook users
Over 20,000 variations of Koobface virus haunting Facebook users Print E-mail
Written by Rebecca Mints   
Friday, 03 April 2009 01:32
Security researchers have monitored more than 20,000 variations of Koobface virus since its discovery in August last year which has allowed the virus and  attackers to avoid detection.

Because it is constantly changing, experts has described Koobface as “highly polymorphic” and again raised the alarm for social-networking site Facebook clients to protect themselves from the virus by installing automatic anti-virus updates.

Jeff Williams, group program manager of the Microsoft Malware Protection Center which is now helping facebook eradicate Koobface, said in his blog that they encounter the virus from the same computer more than once.

“We’re also working to detect new variants of the Koobface virus as they’re discovered so we can provide ongoing protection from this threat,” he wrote.

Koobface has already been added to Microsoft’s Malicious Software Removal Tool (MSRT), a powerful utility that checks computers on Windows platform to detect and kill viruses.

Facebook users have been haunted by the Koobface virus for the past months, in which they receive messages like “you look funny in this new video” with a multimedia link that, when clicked, would activate a Trojan. With Koobface in the system, an attacker can remotely access all secured information of the user.

 Williams said that since releasing the newest version of MSRT two weeks ago, Koobface has been found and removed from almost 140,000 computers in over 140 areas worldwide.

Facebook has released a security advisory for its clients with machines running on Windows to use Automatic Updates for them to receive MSRT every part. There are also accessible online virus scanners on the Microsoft and Facebook websites.


WTW Threat Level