Facebook, Koobface, the other side

Kaspersky Lab Detects New Worms Attacking MySpace and Facebook

"Kaspersky Lab, a leading developer of secure content management systems, has detected two variants of a new worm, Net-Worm.Win32.Koobface.a. and Net-Worm.Win32.Koobface.b, which attack MySpace and Facebook respectively. As part of their malicious payload, the worms transform victim machines into zombie computers to form botnets.

Even though the worms are currently only infecting MySpace and Facebook users, Kaspersky Lab analysts are warning users that the worms are designed to upload additional malicious modules with other functionality via the Internet. It is highly probable that victim machines will not only be used for spreading links via these social networking sites, but the botnets will also be used for other malicious purposes."

This is the same as an infamous attack of last year. If anything, some blogs say they are rumors, others say they are fact.

This blog from mashable.com claims is it is a two part way of having you go to a site which loads malware by luring you with this scare. Some might call it social scareware at this point, as far as eggBrain is concerned.

Associatedcontent.com's post states: "Facebook users who added the Fan Check application may find themselves especially vulnerable. The Fan Check application tells you which of your friends are your biggest fans. It compiles data by accessing your wall and your news feed (already a bit creepy from a privacy standpoint, but Facebook users are aware of this when they add the application)."

Again, if you are a facebook user and you have this app, please try to remove it promptly. In addition, there are signatures written for the Koobface virus by various antivirus companies, such as Kapersky and Norton/Symantec. (This link contains information about the virus and it's latest certification as late as Sept 4, 2009.

All in all, in eggBrain's honest AND professional opinion, UPDATE your antivirus, DISCONNECT your machine from the internet, and SCAN your computer with a Full detailed scan. The software that we recommend, AVG Antivirus, does have a signature written for it so you SHOULD be protected.

Reconnect after you are SURE any and all malware has been removed.

If you STILL have the virus and any other malware that may have come along because of it, you may need to have an expert, such as eggBrain, to take a look at your machine.

Feel free to post your progress here or e-mail eggBrain.

Regards,
eggBrain

Facebook, Fan Check Virus

To all users of Facebook, please check out this article:

FaceBook Fan Check Virus Already Infected A Lot Of Users

and here is a quote:

"Yeah, you should know that FaceBook is full of viruses, malware and phishing scams among others, but you can protect yourselves. FaceBook Fan Check is apparently an app which checks your number of friends, then gives users the possibility to create a RSS feed to post it on your FaceBook page.

All is good until here as this is nothing more than a virus. When users try to access the FaceBook Fan Check app they’ll get a message that says the app is down because the developer is adding new features, and new capacity, and that it could take days to finish them. IT says that you should become a fan on FaceBook of the update, but in fact it will infect your FaceBook account, and it will send an email to all of your friends to become a fan, but it will infect them too."

Please be aware. No antivirus has been able to detect it yet, and at the same time, if you can, disconnect your line from the network OR disconnect your wireless in the meantime. A solution for this may be coming soon, or at least a workaround. Please stay posted.

And don't download anything that says it can exclusively remove it.

Regards,

eggBrain