Facebook and Twitter Koobface worm: Worm strikes again, hijacks your account (GALEWHER . C0M)

The Koobface worm has struck again, this time it relies directly on the user to download the Trojan virus.

*UPDATE: galewher.com and the site that would appear in Google searches have officially been shut down. With your help we have properly saved many people from getting infected by the Koobface worm this round. We will update you as we receive more information on Koobface attacks.

If you have recieved a message that is similar those shown below, ignore it, delete it and more importantly change your password and tell the sender to change theirs immediately. It also has an ingenious evil plan up it’s sleeve, it owns the first few top ranking searches on Google (our site may now be the top ranking site). When you Google search the link given to you, it asks you to go to the page that will have a download on it, saying you have a virus and must download it to remove the virus. We have just received information that this site is also being broad casted on Twitter. If your Twitter account is sending it out, change your password immediately. Also be sure that your e-mail address remains yours, as hijackers tend to change it so they can continue to steal your account.

*Editors note: If your account has been attacked by the KoobFace worm, you need to run a virus scan on your computers (AVG Free is quite helpful). You should also use a malware/ad-ware scanner like Lavasofts. Change your Facebook password and make sure you remove any weird Facebook applications, that may actually be causing the problem. The Koobface worm is suspected to be caused by Facebook applications spamming people through your account.

Posts that you may find on your wall from an infected account:

GALEWHER . C0M I heard some ppl in my family talkin about this during Thanxgiving. Check it out
Anyone need some Bonus Christmas Cash? Check out GALEWHER . C0M for good tips. I joined myself
GALEWHER . C0M hey check out this rather interesting news article a family member told me about.

Hijacked Facebook account from the Koobface worm

The Koobface worm is known for stealing your account as a result of putting your information directly into a fake Facebook login page or downloading one of the Trojan viruses from the Koobface worm sites. There has also been some speculation that various Facebook apps have back doors for hijacking your accounts to post information. For those who do venture off to that site, DO NOT under any circumstance download or accept the download that continues to open. There will also be a “virus scanner” that is clearly fake. It will say you have a virus and ask you to download a tool to remove it. If you get stuck on that page, make sure you hit ALT-F4 this will close your browser. This is a trick to get people to download the actual virus. This worm also tends to prey upon people who leave their account idle for certain periods of time.

For more information check our our previous articles on Koobface Worm attacks:

friends-to-friends-only.com is a phishing Web site to steal your information (Web site Walk through) AKA [gabblemodule.com, gabbleunit.com, gabbleserv.com, etc..]

Facebook phishing scheme is back, now for Google cash jobs

If you have any further information on the Koobface worm please contact us at evolutionfreelancemedia@gmail.com. We want to ensure that the internet especially social networking sites are safe for all, so if there are other sites that have been posted on your wall, please let us know so that we may inform others as well. Another helpful tip may be to also delete your cookies and your history as well.

Help out your friends by reposting this article on your Facebook and Twitter feeds. Please be sure to site all information taken from this page. If you would like to use our images please ask and you are more than welcome to use them.

Author: Elliot S. Volkman

Follow us on Twitter! 

You can also find us on Myspace and Facebook as well.