by Len Morse

Created on: December 11, 2008   Last Updated: July 30, 2009

The computer worm virus Koobface (Anagram for "Facebook") has moved to other social networking websites. The latest victims are members of the highly popular Twitter network, according to pcmag.com.

This current Koobface resurgence (June 2009) demands attention, but anti-virus protection and using common sense when opening any electronic message can help maintain computer security.

== What is Koobface? ==

Koobface (a.k.a. "Net-Worm.Win32.Koobface") is a computer virus that attacks not only social networking websites Facebook and MySpace, but Flickr, Tagged, Bebo, Hi5, Netlog, Friendster, and others via personal messages containing misleading information. According to Internetnews.com, over 1,000 variants now exist, each with slight differences in the code to reach more websites. While Microsoft Windows is the only victimized operating system, the determination of Koobface's unknown creators has apparently not waned; so all system users should remain vigilant.

According to Kaspesky Lab, a leading anti-malware software developer, since Koobface first appeared (July of 2008), June of 2009 has seen an alarming rise in Koobface variants and attacks.

== How Does It Work? ==

The recipient receives an innocent message, most likely from a friend (who's system is unknowingly already infected), with an invitation to click a link. The invitation might read similar to the following: "Just saw this funny video of you. Check it out!" or "My home video :-)". If the recipient clicks the link, he/she will be taken to a site that is made to look like a YouTube, Google, or Picasa video page.

If the video link is clicked, a fake error message will prompt the victim to download the newest version of Adobe's Flash Player. The link, also fake, is shown as "flash_player.exe," but is actually a variation of the original Koobface virus. If downloaded, the virus can detect and steal personal information directly from the victim's computer, and will also send the same message to the victim's friends on that network.

== How to Protect Yourself ==

Social Networking site users are particularly susceptible to this virus, since they tend to trust information coming from within their accounts. Members of such sites should change their passwords and use current anti-virus software.

Users should also keep an eye out for fraudulent e-mails by reading the titles. In general, if an e-mail makes no sense, makes an offer that seems too good to be true, or has major misspellings, delete it immediately without opening it. The old adage "Better safe than sorry" is an excellent mantra when dealing with unknown electronic messages.

Security software developer McAfee advises to be cautious with any unexpected or unusual-looking link, even if it's from a friend. Ask for confirmation first.

Facebook is working to erase these threatening links from its system, but all social networking site users should still be wary of any strange or unanticipated e-mail transmissions. For more information and tips on dealing with spam, scams, and other web-related threats, visit Facebook Security.

Kaspersky Lab also advises to not give out any personal information and to keep your anti-virus software updated.

Learn more about this author, Len Morse.
Click here to send this author comments or questions.