Koobface « Webroot Threat Blog

10 Threats from 2010 We’d Prefer Remain History

January 1, 2011 – 3:32 pm

By Andrew Brandt With 2010 finally behind us, and an unknown number of cyberattacks likely to come in the new year, I thought I’d run down a brief list of the malicious campaigns criminals pulled off last year that I’d really dread to see anyone repeat. Now that they’re in the past, they should stay [...]

By mguthrie09 | Posted in Enterprises, Stupid malware tricks, Threat Research, Firefox, Phishing Trojans, Keyloggers, Rogue Security Products, Gaming threats, social networks, social engineering, Passwords, Online shopping threats, spam, phishing, Blackhat SEO, Destructive behavior, Trojans, Website owners, Internet Explorer, Backdoors, Botnet activity | Tags: .cc, .in, Adobe updater, Aurora, BHSEO, black hat SEO, ccTLD, China, Cocos (Keeling) Islands, Exploit-PDF, Fake PDF, Firefox, Firefox update, Flash update, India, Koobface, Oficla, Operation Aurora, rogue antivirus, Rogue Security Products, Sasfis, SEO, Stuxnet, Tacticlol, Trojan-Downloader-Tacticlol, Windows Update | Comments (1)

Fake Flash Update Needs Flash to Work

September 7, 2010 – 1:23 pm

By Andrew Brandt If you live in the US, you may have played sports, barbequed, or enjoyed the last long weekend of the summer outside doing something fun outdoors. Unfortunately, that wasn’t an option here in Boulder, where a large wildfire generated a thick plume of smoke and ash. So, what’s a malware analyst to [...]

By mguthrie09 | Posted in Downloaders, phishing, Phishing Trojans, Rogue Security Products, social engineering, social networks, spam, Stupid malware tricks, Threat Research, Trojans | Tags: ah17 (10 hours ago), babachat (4 hours ago), csmith1199 (6 hours ago), ff2ie.exe, Flash Player 10.37, Funniest thing EVER!!, Koobface, m24.in, m24.in.exe, Nice vid :), sinmike1 (7 hours ago), that.... was .......GREAT !!!, Video posted by ... Hidden Camera ..., WooHoo!! Love this vid!!! Congrats on the front page!!!! :-), Worm-Koobface | Comments (1)

Pro-Israel Website Receives Passwords Stolen by Koobface

September 2, 2010 – 1:04 pm

By Andrew Brandt Is the team behind the Koobface worm taking a stance on the Israeli-Palestinian peace talks, or is this notorious worm’s most recent, bizarre twist just a coincidence? We’ve seen Koobface hijack legitimate Web sites for more than a year, using them not only to host malicious payload files, but also to work [...]

By mguthrie09 | Posted in Keyloggers, phishing, Phishing Trojans, Rogue Security Products, social engineering, social networks, Stupid malware tricks, Threat Research, Trojans | Tags: Israel, Israeli, Koobface, middle east peace, migdal, migdal.org, migdal.org.il, migdal.org.il.exe, Palestine, Palestinian, Worm-Koobface | Comments (2)

Facebook “Photo Album” Spam Drops Trojans

June 14, 2010 – 2:43 pm

By Andrew Brandt A spammed link campaign that spread through Facebook rapidly over the weekend delivered a malicious payload designed to take control of the Facebook account of any infected user, steal passwords, and hijack clicks in the victim’s browser. The messages appear as links sent by a friend, accompanied by the brain-damaged text “You? [...]

By mguthrie09 | Posted in Downloaders, Phishing Trojans, social engineering, social networks, Stupid malware tricks | Tags: Album.exe, facebook, Koobface, online-photo-album.org, online-photo-albums.org, spmfb2299.com, spmfb3309.com, Trojan-Bamital, Trojan-Downloader-Suurch, TRxRA, You? I find it on Google. | Comments (1)

Weird New Koobface URLs Use Old Tricks

March 19, 2010 – 2:20 pm

By Andrew Brandt Pretty much since it arrived on the malware scene, Koobface has used the technique of sending messages with Web links — in your name, to your friends — as a method of propagating the infection to others. Using your name is a powerful social engineering trick, and the makers of the worm [...]

By mguthrie09 | Posted in social engineering, social networks, Stupid malware tricks, Threat Research | Tags: dotless IP, dotless IP address, hex IP address, hexadecimal IP, http://0100.0116.0266.0322, http://0x404eb6d2, http://1078900434, Koobface, obfuscated URLs, octal IP | Comments (6)

New Research: IT Pros Sound Off On 2010 Security Concerns

February 17, 2010 – 12:31 pm

Research from the enterprise security experts at Webroot With the explosion of social networking sites like Twitter and Facebook in 2009, it’s no surprise cybercriminals have set their sights on these Web sites for new victims. Facebook now has over 400 million active users and Twitter has over six million — a sizeable pool of potential targets. [...]

By mguthrie09 | Posted in Enterprises, social engineering, social networks | Tags: Conficker, facebook, Koobface, SMB, twitter, worm | Leave a Comment

‘Spongeface’ Koobface Variant Uses Spongebob as a Tease

January 20, 2010 – 12:40 pm

spongebob koobface

By mguthrie09 | Posted in social engineering, social networks, Stupid malware tricks, Uncategorized | Tags: ... Sponge Bob ..., Adobe Flash Player 10.37, captcha.dll, Koobface, Spongebob, spongebob koobface, Spongebob Squarepants, Spongeface, webserver.exe, Worm-Koobface | Comments (4)

Friends, Followers, Fans: Be On Guard in 2010

December 30, 2009 – 10:39 am

By Mike Kronenberg Do you use a social networking site? Be prepared, because I predict in 2010 it’ll be a major target for cyber criminals. Among the threat experts here at Webroot, we’ve discussed the ROI opportunity that social networks present an enterprising hacker who strings together the personal information people choose to share on [...]

By Mike | Posted in social engineering, social networks, Threat Research | Tags: facebook, Koobface, MyYearbook, phishing, twitter | Leave a Comment

New Koobface Creates its Own Malicious Web Pages

December 10, 2009 – 10:24 am

By Andrew Brandt Over the past several months, we’ve seen Koobface steadily progress in its ability to infect systems with malware. In our latest tests, we’ve found that the most recent version of this social-networm has a few new holiday-themed tricks up its sleeve. Among those tricks are a new, improved “captcha breaker” utility; A [...]

By mguthrie09 | Posted in Rogue Security Products, social engineering, social networks, Stupid malware tricks, Threat Research | Tags: Google Reader, Koobface | Comments (4)

Internet Security Trends – A Look Back at 2009, A Look Ahead to 2010

November 20, 2009 – 2:29 pm

By Gerhard Eschelbeck It’s been a busy year in Internet security — cybercriminals were crafty and creative while we security vendors worked hard to stay a step ahead. Let’s take a look back at the biggest security trends of 2009, and at predictions for what’s ahead in 2010. 2009 – The Year in Review Conficker. Targeted [...]

By mguthrie09 | Posted in Enterprises, Internet security industry, Threat Research | Tags: Cloud computing, Koobface, phishing, social networks, URL filtering | Comments (5)

Follow

Follow “Webroot Threat Blog”

Powered by WordPress.com