Microsoft adds Koobface to malware removal tool
Tuesday, April 7, 2009
The Microsoft Malware Protection Center (MMPC) has been working with Facebook to protect the popular social networking site from the malicious Koobface virus.
MMPC principal group program manager Jeff Williams explained on the Facebook blog last week that Microsoft's virus detection and removal tool (MSRT) has removed Koobface 200,000 times from over 133,677 computers.
MMPC worked with Facebook to add detection of Koobface to the latest version of Microsoft's MSRT, released two weeks ago, Williams explained on the blog.
The virus spreads through spam messages on the social networking site that invite users to click on a link. The link takes users to a malicious site where they are prompted to download a Trojan masked as an Adobe Flash update, email security experts said.
The Trojan could allow an attacker to remotely steal a victim's Facebook password and other information or use the computer to launch attacks on other computers.
The virus, which began infecting computers in May 2008, is "highly polymorphic," with over 20,000 variations to date, Williams explained.
"Sometimes we remove the virus from the same computer more than once," he wrote. "We're also working to detect new variants of the Koobface virus as they're discovered, so we can provide ongoing protection from this threat."

Related News:
Cyber criminals exposed medical records - 3.8.2010 More than 18,000 patients, whose medical information is stored on the computer systems of five doctors in Torrance, California, were potential victims of identity theft in September when cyber criminals penetrated the doctors' networks, according to the Los Angeles Times.
McAfee advises companies to boost web security relating to source code - 3.4.2010 At the RSA Conference, currently taking place in San Francisco, McAfee released a report indicating that companies regularly use too few web security protocols when protecting intellectual property such as source code.
False social networking attacks provides teachable moment for web security - 2.25.2010 A unique tool developed to prevent the spread of malware from social networking websites has been recommended Processor.com, a web and network security news provider.
With global web security under siege, exports point to problems - 2.25.2010 In 2009, Garlik, a United Kingdom-based web security company, reported a 207 percent increase in malware use to overtake bank accounts. Recent events have also shown vulnerability in corporate, private and governmental web security systems.
Kaspersky reports malware growing more sophisticated - 2.24.2010 Kaspersky, a web security provider, reported Wednesday that while there is very little growth in the amount of malware currently roaming the web, it is becoming more advanced and much harder to detect.
|