The Koobface worm is self-replicating itself again on Facebook, but this time we may have found the host.
Every few months the Koobface worm attacks its host computer after a time bomb essentially sets off. The virus is passed through Facebook messages, placed on peoples walls and unsuspecting people download the worm without knowing what it is.
The people who then downloaded the worm have a time bomb that will eventually spread the message once again. It’s still one of the most prevalent issues that are spreading throughout Facebook, Twitter and occasionally on Myspace.
Phishing sites may also be a starting point for the Koobface worm, which clone the Facebook login page and trick individuals into willingly provide their login information.
The Koobface worm being spread
Often times the worm will have incorrect spellings in the message like the one above, “You olok rpetty good on tihs vdieo uIBHuM#”. This particular link will bring unsuspecting Facebook users to a website that vaguely looks like YouTube and anywhere you click a download prompt for the worm will appear.
The website host
Something in the link is causing a short delay in a website redirect, which in turn has allowed us to find the host of link. Now this person may not know that his site is hosting the redirect for the Koobface worm, but it seems like a very odd blog anyways. The blog found here known as The Fox At The Door is hosted on a WordPress site.
Well it turns out that the owner of the Fox At the Door site is not in fact part of the purposeful spread of the Koobface worm. He kindly responded and deleted the folder that was containing the redirect. Now the first wave of messages that was sent has been stopped short; however, this has now prompted a new redirect to appear on a Swedish site. The second malicious message was accompanied by the following, “oYur behvaior is absloutely sohcking!”
It is quite possible that the virus that appears on these sites are actually trojan viruses that attach to peoples personal sites and then spreads it’s message through Facebook. The Koobface worm is a nasty beast and seems to continue to get smarter as it goes.
