Koobface Worm Asks For Captcha

All things related to Firewalls and Anti Virus.

Moderators: Admin Team, Moderators

User avatar
TeMerc
Site Admin
Site Admin
Posts: 15995
Joined: Fri Jan 28, 2005 5:16 pm
Area Of Expertise: Security
experience: I know the functions, OS settings, registry tweaks and more
PC time: What else is there in life?
Location: PHX, AZ
Contact:

Koobface Worm Asks For Captcha

Postby TeMerc » Mon Nov 30, 2009 12:18 am

Sunday November 29, 2009 at 5:57 pm CST
Posted by Neha Joshi

We discussed in a recent blog on how “Google Reader Becomes Unwitting Spam Target”, the same behavior is being seen in a recent variant of Koobface. This variant uses the Google reader page to host the malware.

When the user tries to play the YouTube video the webpage gets redirected to:

hxxp://www.hs-limmattal.ch/{blocked}/

which pretends to be a Facebook help center page which ironically displays information on how to protect against the Koobface worm!!

0-= Continued @ McAfee Labs Blog
Image

User avatar
Mystery
Posts: 232
Joined: Fri Jul 10, 2009 7:56 am
Gender: Female
experience: Not only can I turn PC on, I know most of its functions too
PC time: Alot more than I should
Location: Switzerland
Contact:

Re: Koobface Worm Asks For Captcha

Postby Mystery » Mon Nov 30, 2009 1:06 pm

Thanks for the info :)

Another case of an old homepage of an organization/school, which has moved to a new one. The host should have taken down the old site by the end of 2008 according to the info by the group...
Unfortunately similar issues happen very often (btw I'm currently in the process of notifying universities of compromised webpages of former staff members; or their previous domain that is still up) :(
Why do geeks think Halloween and Christmas occur on the same day?
Because 31oct = 25dec ;)


Return to “Firewalls and Anti-Virus\Trojans\Worms Related”

Who is online

Users browsing this forum: No registered users and 1 guest