[who moi]

...Brothers....

wait, do this belong in the food court??



heckit, I am weirder than 3 chickens riding a horse...

[who moi]

if you are a facebook user, there is a real threat going on:

Koobface, Other Worms Target Facebook Friends (NewsFactor)
Posted on Thu Mar 5, 2009 11:31AM EST


- As Facebook works to make itself more relevant and timely for its growing member base with a profile page makeover, attackers seem to be working overtime to steal the identities of the friends, fans and brands that connect though the social-networking site.

Indeed, Facebook has seen five different security threats in the past week. According to Trend Micro, four new hoax applications are attempting to trick members into divulging their usernames and passwords. And a new variant of the Koobface worm is running wild on the site, installing malware on the computers of victims who click on a link to a fake YouTube video.

The Koobface worm is dangerous. It can be dropped by other malware and downloaded unknowingly by a user when visiting malicious Web sites, Trend Micro reports. When attackers execute the malware, it searches for cookies created by online social networks. The latest variant is targeting Facebook, but earlier variants have also plagued MySpace.

Koobface's Wicked Agenda

Once Koobface finds the social-networking cookies, it makes a DNS query to check IP addresses that correspond to remote domains. Trend Micro explains that those servers can send and receive information about the affected machine. Once connected, the malicious user can remotely perform commands on the victim's machine.

"Once cookies related to the monitored social-networking Web sites are located, it connects to these Web sites using the user log-in session stored in the cookies. It then navigates through pages to search for the user's friends. If a friend has been located, it sends an HTTP POST request to the server," Trend Micro reports.

Ultimately, the worm's agenda is to transform the victim's computer into a zombie and form botnets for malicious purposes. Koobface attempts to do this by composing a message and sending it to the user's friends. The message contains a link to a Web site where a copy of the worm can be downloaded by unsuspecting friends. And the cycle repeats itself.

An Attractive Face(book)

Malware authors are investing more energy in Facebook and other social-networking sites because that effort pays off, according to Michael Argast, a security analyst at Sophos. Facebook alone has more than 175 million users, which makes it an attractive target.

"Many computer users have been conditioned not to open an attachment from an e-mail or click a link found within, but won't think twice about checking out a hot new video linked to by a trusted friend on Facebook," Argast said.

Argast called the Koobface worm a mix of something old and something new. The new is using social networks as a method to spread malware. The old is using fake codec Trojans linked to a saucy video to induce the user to install the malware.

Argast said people can protect themselves by running up-to-date antivirus software, restricting which Facebook applications they install, thinking twice before clicking on links from friends and never, never installing a codec from some random Web site in the hopes of catching some celebrity in a compromised situation.

"I would expect to see more attacks on Facebook," Argast said. "As long as this is a successful propagation method, the bad guys will double down and invest more. They are entirely motivated by financial gain. If it pays, they'll continue to romp in your social playgrounds."

[Blessings2You]

One of the bennies of an old computer and dial-up. My computer gags on the applications, so I don't do any of that foo-foo such as sending fake doughnuts and saving the rain forest. Whew.

And...I got it! I got it! I figgered out the thread subject without even hovering the cursor! I'm beginning to understand whomoiish!

[mrsD]

does one have to click on the YouTubes?

Or is it hidden in other thingies?

I read that article from Yahoo at about 2am, and I wasn't too
together at the time.

So any further translation would be helpful.

[who moi]

a million ducks to all those that got the inside joke. LOLOL

I am not sure how it works cause I just read it last night and had an "incogfognito" moment...(edited: Did some more search, posted the info below. Please feel free to correct/add/subtract the info. LOL)

I also don't use facebook so am not sure with their interface. But I can look it up and see.

it sounded pretty serious...

moiism...hmmmmm...I like it, if we pronounce it like WII, Moii is pronounced: Mee




~~~~~~~~~~~~~

OK, from my understanding is that there are simply sites that lures you. Meaning that let's say I posted a link here that goes: http://findyourlonglostfriendhere.com or something like that

That website is embedded with the worm(s).

all one has to do is visit it and what it does, is then it starts to go into your "cookies" jar and look for cookies that are associated with the Facebook sites (or myspace).

Once it finds it, it then attacks you in that way by exploiting the weakness in the Facebook security but gets YOUR information that way.

Really dangerous because it is not just getting an email or PM and then downloading something. It is simply visiting something...

I would always clear my cookies after I use the internet. I also have my security high. WHen I am surfing, I drop it down to med high.

I also turn on my firewalls. But in this case, I am not sure if it is enough. I think they are working on it because it is coming at you so fast and quick.

Reminds me of the "mycoolweb" worms....Nasty buggers....