ESET Threat Blog

Old hoaxes never die. They just get transplanted to Facebook. Sometimes literally, when a classic email hoax starts to spread with minor emendations through Facebook message or news feeds. In this case, the actual message (at least, as I received it) is still email, but it's been adapted to appeal to the more than 800 million Facebook … Read More…

Earlier this month, we reported on the massive new Koobface campaign making the rounds through Facebook and how it tricked users into downloading and running it through that tenet of social engineering, the fake codec. We now have a video showing how the Koobface worm tricks users into running it:

NOTE: The audio is not completely … Read More…

Since our April ESET news has already been dominated by Facebook and Koobface an updated Facebook best practices wrapup seemed in order.
Facebook Newbie? Read This First
While most of us involved with this blog are old hands at implementing security, sometimes it’s hard for others to process the do’s and don’ts.
Michelle Green contributed one of the … Read More…

This is really easy!!! Koobface is an anagram of Facebook!!! Now you know all you need to know about Koobface.
Seriously, I can tell you that Koobface is a family of threats that spread through social networking sites, but how does that help you? There are other threats on social networking sites as well. The key … Read More…

 ESET Latin America has confirmed that the Koobface variants they're looking at download rogue security software and other trojans from active urls.
They include:
Win32/TrojanProxy.Small.NEB trojan
Win32/PSW.Delf.NSE trojan
Win32/Qhost.NTN trojan
Win32/Agent.QWU trojan
a variant of Win32/Koobface.NCI worm
a variant of Win32/Koobface.NCP worm
Win32/Adware.Antivirus2009.AA
David Harley CISSP FBCS CITP
Research Fellow & Director of Malware Intelligence
ESET Threatblog (TinyURL with preview enabled): http://preview.tinyurl.com/esetblog
ESET Threatblog notifications on … Read More…

Our colleagues in ESET Latin-America have reported that a huge new malware distribution campaign is being carried out through the popular social network Facebook. In this instance, it is our old friend the Koobface worm that is being propagated. (For more about Koobface see Randy's post here, and for more about this particular iteration, see … Read More…