SocialNetworking giant Facebook is under a kind of attack as a worm responsible for sending Facebook users malicious code (appears to be limited in nature) is active.

This Worm is called "Koobface" and works as follows:

• Facebook user receives a message in their Facebook in-box announcing, "You look funny in this new video" .

• After that, recipients are invited to click on a provided link.

• Victim is them redirected to the video site, where a message says an update of Flash is needed before the video can be displayed.

• The viewer is prompted to open a file called flash_player.exe

• If the viewer approves the Flash installation, Koobface attempts to download a program called tinyproxy.exe. This program loads a proxy server called Security Accounts Manager (SamSs) the next time the computer starts. Koobface then sits there and listens to traffic on TCP port 9090 and proxies all outgoing HTTP traffic.

• Koobface includes a bot-like component that could install other malicious apps at a later time. (pretty scary !)

Good news:

Facebook is aware of the situation.

• Facebook has posted instructions on how to remove the infection.

The best recommendation for users is not to open any unexpected e-mail attachments, even if they are from someone you know.

So next time you receive a "cool" video from your buddy think twice !

If you like this hub, you might also want to check out other hubs of similar theme. Subscribe to my Latest Hubs RSS feed or join my Fan club so you will be notified as soon as I publish new hubs.

Happy Computing :)