CNET News: Koobface virus hits Facebook

CNET News: Koobface virus hits Facebook by Robert Vamosi December 4, 2008

Top: “Cyborg Stare” Dec. 5, 2008 Kevin Dayhoff

Photo credit: A new mass-mailing virus targeting Facebook users directs victims to a site asking to download a Trojan masked as an Adobe Flash update. (Credit: McAfee Avert Labs) Actually this is a cropped version of the McAfee Avert Labs photo. I have the same image in my main computer, that is not available at the moment as I am still working on restoring all my data files and operating system after the “Facebook Koobface” virus infected my system in the early morning hours of December 4, 2008.

This message could lead you to the Koobface virus, say security experts.
(Credit: McAfee Avert Labs)

This is another good article that explains how the “Facebook Koobface” virus works…

A worm responsible for sending Facebook users malicious code appears to be limited in nature, although the social engineering attack may be used again, say experts.

Facebook representative Barry Schnitt said the worm isn't new; it dates back to August, although the variant that first appeared on Wednesday targets only Facebook users.

Craig Schmugar, threat researcher for McAfee Avert Labs, confirmed this in a call with CNET News and said that, in general, Koobface strikes only social-networking sites.

After receiving a message in their Facebook in-box announcing, "You look funny in this new video" or something similar, recipients are then invited to click on a provided link. Once on the video site, a message says an update of Flash is needed before the video can be displayed. The viewer is prompted to open a file called flash_player.exe.

Schmugar said the prompt for a new player should be a warning. "The messages you tend to get from these sites don't look quite right." For instance, IE will tell you where the update is coming from, and usually it's not an Adobe site.

However, the message “a message says an update of Flash is needed before the video can be displayed,” is effective as many Microsoft users are aware that Microsoft and Adobe do not get along and that appears that Microsoft inhibits using Adobe products in Windows operating systems.

Many technology users maintain a hope that Microsoft will eventually stop attempting to inhibit Adobe products and we are always looking forward to “an update of flash” that will finally run easily in a Microsoft environment…

Another underreported dynamic is that the virus just breezed by Microsoft’s vaunted security update program. This program has been the source of much aggravation for heavy users; and now when the situation presents, that is why we put up with the obnoxious pesky persistent updates – it fails to work.

So the questions easily rises to the surface – why participate in the Microsoft update program?

If the viewer approves the Flash installation, Koobface attempts to download a program called tinyproxy.exe. This loads a proxy server called Security Accounts Manager (SamSs) the next time the computer boots up. Koobface then listens to traffic on TCP port 9090 and proxies all outgoing HTTP traffic. For example, a search performed on Google, Yahoo, MSN, or Live.com may be hijacked to other, lesser-known search sites.

Schmugar said this version of Koobface includes a bot-like component that could install other malicious apps at a later time.

[…]

Meanwhile, many articles repeat, “Facebook has posted instructions on how to remove the infection.” No it doesn’t. The information posted on the Facebook security page is so deficient and underwhelming, one could easily mistake it for humor.

According to a December 4, 2008 Reuters article, “Social network MySpace, owned by News Corp, was hit by a version of Koobface in August and used security technology to eradicate it, according to a company spokeswoman. The virus has not cropped up since then, she said.

If “MySpace” can protect its users, then why can’t Facebook?

[…]

Read the entire article here: Koobface virus hits Facebook

http://news.cnet.com/8301-1009_3-10113981-83.html


20081204 Koobface virus hits Facebook

Kevin Dayhoff Westgov.Net: Westminster Maryland Online

CNET News: Koobface virus hits Facebook

CNET News: Koobface virus hits Facebook by Robert Vamosi December 4, 2008

Top: “Cyborg Stare” Dec. 5, 2008 Kevin Dayhoff

Photo credit: A new mass-mailing virus targeting Facebook users directs victims to a site asking to download a Trojan masked as an Adobe Flash update. (Credit: McAfee Avert Labs) Actually this is a cropped version of the McAfee Avert Labs photo. I have the same image in my main computer, that is not available at the moment as I am still working on restoring all my data files and operating system after the “Facebook Koobface” virus infected my system in the early morning hours of December 4, 2008.

This message could lead you to the Koobface virus, say security experts.
(Credit: McAfee Avert Labs)

This is another good article that explains how the “Facebook Koobface” virus works…

A worm responsible for sending Facebook users malicious code appears to be limited in nature, although the social engineering attack may be used again, say experts.

Facebook representative Barry Schnitt said the worm isn't new; it dates back to August, although the variant that first appeared on Wednesday targets only Facebook users.

Craig Schmugar, threat researcher for McAfee Avert Labs, confirmed this in a call with CNET News and said that, in general, Koobface strikes only social-networking sites.

After receiving a message in their Facebook in-box announcing, "You look funny in this new video" or something similar, recipients are then invited to click on a provided link. Once on the video site, a message says an update of Flash is needed before the video can be displayed. The viewer is prompted to open a file called flash_player.exe.

Schmugar said the prompt for a new player should be a warning. "The messages you tend to get from these sites don't look quite right." For instance, IE will tell you where the update is coming from, and usually it's not an Adobe site.

However, the message “a message says an update of Flash is needed before the video can be displayed,” is effective as many Microsoft users are aware that Microsoft and Adobe do not get along and that appears that Microsoft inhibits using Adobe products in Windows operating systems.

Many technology users maintain a hope that Microsoft will eventually stop attempting to inhibit Adobe products and we are always looking forward to “an update of flash” that will finally run easily in a Microsoft environment…

Another underreported dynamic is that the virus just breezed by Microsoft’s vaunted security update program. This program has been the source of much aggravation for heavy users; and now when the situation presents, that is why we put up with the obnoxious pesky persistent updates – it fails to work.

So the questions easily rises to the surface – why participate in the Microsoft update program?

If the viewer approves the Flash installation, Koobface attempts to download a program called tinyproxy.exe. This loads a proxy server called Security Accounts Manager (SamSs) the next time the computer boots up. Koobface then listens to traffic on TCP port 9090 and proxies all outgoing HTTP traffic. For example, a search performed on Google, Yahoo, MSN, or Live.com may be hijacked to other, lesser-known search sites.

Schmugar said this version of Koobface includes a bot-like component that could install other malicious apps at a later time.

[…]

Meanwhile, many articles repeat, “Facebook has posted instructions on how to remove the infection.” No it doesn’t. The information posted on the Facebook security page is so deficient and underwhelming, one could easily mistake it for humor.

According to a December 4, 2008 Reuters article, “Social network MySpace, owned by News Corp, was hit by a version of Koobface in August and used security technology to eradicate it, according to a company spokeswoman. The virus has not cropped up since then, she said.

If “MySpace” can protect its users, then why can’t Facebook?

[…]

Read the entire article here: Koobface virus hits Facebook

http://news.cnet.com/8301-1009_3-10113981-83.html


20081204 Koobface virus hits Facebook

I have a sad face today after being attacked by the Facebook Koobface virus

I have a sad face today after being attacked by the Facebook Koobface virus

Thursday, December 4, 2008

Related: Reuters: Destructive Koobface virus turns up on Facebook By Jim Finkle Thu Dec 4, 2008

I’m working on a backup computer because I have fallen victim to the “Facebook virus” that is making the rounds as it is described here – and in a Reuters’ article:

[…] “McAfee warned in a blog entry on Wednesday that its researchers had discovered that Koobface was making the rounds on Facebook…

“Facebook's 120 million users are being targeted by a virus dubbed "Koobface" that uses the social network's messaging system to infect PCs, then tries to gather sensitive information such as credit card numbers.

“It is the latest attack by hackers increasingly looking to prey on users of social networking sites…

“Koobface spreads by sending notes to friends of someone whose PC has been infected. The messages, with subject headers like, ‘You look just awesome in this new movie,’ direct recipients to a website where they are asked to download what it claims is an update of Adobe Systems Inc's Flash player.

“…users tend to be far less suspicious of messages they receive in the network. ‘People tend to let their guard down. They think you've got to log in with an account, so there is no way that worms and other viruses could infect them,’ Boyd said.”

Another excellent post about this may be found on the Schipul Blog: Facebook Users Attacked by Trojan Virus November 7th, 2008

Over 24 hours later, and after considerable work, the virus has been removed; however it irreparable damaged the operating system, in spite of the highly touted Microsoft security update system...

Fortunately I have backups. However, in spite of an excellent backup system, I temporarily have no access to any of my data, research, notes, preliminary drafts of future columns, writing or art files, because of the thoroughly destructiveness and ingenuousness of this particular attack and how complicated it has been to restore my data and operating systems.

Fortunately my next column is not due until tomorrow and only missed some relatively minor deadlines today, for which, everyone is being very supportive and understanding.

Of course, it is not Facebook’s fault that it was attacked by a virus, with perhaps one pause for thought, as mentioned in the article: “Social network MySpace, owned by News Corp, was hit by a version of Koobface in August and used security technology to eradicate it, according to a company spokeswoman. The virus has not cropped up since then, she said.”

I’m an intense internet and technology user and for twenty years I have safely avoided a serious attack. Although in hindsight I understand how and why I make such a stupid mistake.

Nonetheless, the Reuters article points out that “McAfee has not yet identified the perpetrators behind Koobface, who are improving the malicious software behind the virus in a bid to outsmart security at Facebook and MySpace.

"The people behind it are updating it, refining it, adding new functionalities," said McAfee's Schmugar.”

Over 24 hours later and a lost day of work, I will have to re-evaluate using Facebook. I have to consider that since Facebook is not a component of how I make a living, and that statistically, Facebook users will remain a target of the hackers, I may have to err on the side of avoiding exposing myself to this phenomena in the future.

Between the spam, the phishing, and the hackers, it would appear that the criminals in the internet world are making considerable inroads in eroding the benefits that internet technology can provide to our everyday quality of life.

The ratio of spam to real emails on one of my email accounts is currently 50 to 1. It is not fun worrying about every other click of the mouse…

I wish that somehow, there was some hope that solutions are being developed to combat the criminal element on the internet, however, the technicians I spoke with today, seemed just as pessimistic as I feel at the moment.

20081204 A sad face over the Facebook Koobface virus.

Kevin Dayhoff Westgov.Net: Westminster Maryland Online

I have a sad face today after being attacked by the Facebook Koobface virus

I have a sad face today after being attacked by the Facebook Koobface virus

Thursday, December 4, 2008

Related: Reuters: Destructive Koobface virus turns up on Facebook By Jim Finkle Thu Dec 4, 2008

I’m working on a backup computer because I have fallen victim to the “Facebook virus” that is making the rounds as it is described here – and in a Reuters’ article:

[…] “McAfee warned in a blog entry on Wednesday that its researchers had discovered that Koobface was making the rounds on Facebook…

“Facebook's 120 million users are being targeted by a virus dubbed "Koobface" that uses the social network's messaging system to infect PCs, then tries to gather sensitive information such as credit card numbers.

“It is the latest attack by hackers increasingly looking to prey on users of social networking sites…

“Koobface spreads by sending notes to friends of someone whose PC has been infected. The messages, with subject headers like, ‘You look just awesome in this new movie,’ direct recipients to a website where they are asked to download what it claims is an update of Adobe Systems Inc's Flash player.

“…users tend to be far less suspicious of messages they receive in the network. ‘People tend to let their guard down. They think you've got to log in with an account, so there is no way that worms and other viruses could infect them,’ Boyd said.”

Another excellent post about this may be found on the Schipul Blog: Facebook Users Attacked by Trojan Virus November 7th, 2008

Over 24 hours later, and after considerable work, the virus has been removed; however it irreparable damaged the operating system, in spite of the highly touted Microsoft security update system...

Fortunately I have backups. However, in spite of an excellent backup system, I temporarily have no access to any of my data, research, notes, preliminary drafts of future columns, writing or art files, because of the thoroughly destructiveness and ingenuousness of this particular attack and how complicated it has been to restore my data and operating systems.

Fortunately my next column is not due until tomorrow and only missed some relatively minor deadlines today, for which, everyone is being very supportive and understanding.

Of course, it is not Facebook’s fault that it was attacked by a virus, with perhaps one pause for thought, as mentioned in the article: “Social network MySpace, owned by News Corp, was hit by a version of Koobface in August and used security technology to eradicate it, according to a company spokeswoman. The virus has not cropped up since then, she said.”

I’m an intense internet and technology user and for twenty years I have safely avoided a serious attack. Although in hindsight I understand how and why I make such a stupid mistake.

Nonetheless, the Reuters article points out that “McAfee has not yet identified the perpetrators behind Koobface, who are improving the malicious software behind the virus in a bid to outsmart security at Facebook and MySpace.

"The people behind it are updating it, refining it, adding new functionalities," said McAfee's Schmugar.”

Over 24 hours later and a lost day of work, I will have to re-evaluate using Facebook. I have to consider that since Facebook is not a component of how I make a living, and that statistically, Facebook users will remain a target of the hackers, I may have to err on the side of avoiding exposing myself to this phenomena in the future.

Between the spam, the phishing, and the hackers, it would appear that the criminals in the internet world are making considerable inroads in eroding the benefits that internet technology can provide to our everyday quality of life.

The ratio of spam to real emails on one of my email accounts is currently 50 to 1. It is not fun worrying about every other click of the mouse…

I wish that somehow, there was some hope that solutions are being developed to combat the criminal element on the internet, however, the technicians I spoke with today, seemed just as pessimistic as I feel at the moment.

20081204 A sad face over the Facebook Koobface virus.

Marjorie Lohnes named to serve on the Governor’s Career and Technology Education Task Force

Marjorie Lohnes named to serve on the Governor’s Career and Technology Education Task Force

Carroll County Public Schools
125 North Court Street
Westminster, Maryland 21157

News Release - For Immediate Release

November 24, 2008

Charles I. Ecker, Superintendent

Lohnes to Serve on Governor’s Career and Technology Education Task Force

Marjorie Lohnes, Supervisor of Career and Technology Education for Carroll County Public Schools, has been appointed by Governor Martin O’Malley as a member of the Career and Technology Education Task Force.

The charge of the Task Force is to create an action plan designed to expand the career and technology education programs that prepare students for entry into post-secondary education, apprenticeships and a career where there is current and future employer demand. Priority will be given to expanding programs that support critical infrastructure needs such as construction, health and biosciences, manufacturing, information technology, and consumer services; particularly those vital to industries related to Base Realignment and Closure (BRAC) and Science, Technology, Engineering, and Mathematics (STEM).

Lohnes began her career in education in Carroll County as a teacher. She has served as Supervisor of Career and Technology Education since 1991.

# # #

Contact: Marjorie Lohnes, Supervisor of Career and Technology Education,
410-751-3104

CG/bb
11/24/08

Contact: W. Carey Gaddis, Coordinator of Community and Media Relations
(410) 751-3020 • TTY (410) 751-3034
E-mail - • Web Address - www.carr.org/ccps

Webmaster disclosure: I serve on the Board of Junction with Ms. Lohnes.

20081124 Marjorie Lohnes named to serve on the Governor’s Career and Technology Education Task Force

Kevin Dayhoff Westgov.Net: Westminster Maryland Online

The Onion: Microsoft Ad Campaign Crashing Nation's Televisions

The Onion: Microsoft Ad Campaign Crashing Nation's Televisions

October 27, 2008 Issue 44•44

Webmaster’s note: I would have posted this earlier however, when Microsoft was not crashing, my computer was running so slowly, I lost patience. KED

WASHINGTON—According to an FCC report released Monday, a new $300 million Microsoft ad campaign is responsible for causing televisions all across the country to unexpectedly crash.

The Microsoft ads, which began airing earlier this week, are being blamed for generating critical system errors in more than 70 million televisions. In addition, thousands of frustrated Americans said that the ads have caused their TVs to become unresponsive, their screens to turn blue, and a small box with the message "terminal application error" to suddenly appear.

[…]

The new ad campaign, which features footage of everyday Americans using PCs, was launched as an upgrade to the poorly performing Jerry Seinfeld and Bill Gates commercials, which suffered unspecified failures in two-thirds of U.S. households. Microsoft pulled the defective ads in mid-September, but the move came too late, as countless televisions had already been infected with viruses and spyware.

[…]

When that failed, many television owners said they were left with no other option but to manually restart their devices.

[…]

Recent frustrations with Microsoft have not been limited to its television ads, however. Earlier this week, a billboard promoting the company's latest Windows platform angered hundreds in Detroit when it fell onto three cars, instantly killing all passengers.

Read the entire article here: Microsoft Ad Campaign Crashing Nation's Televisions

http://www.theonion.com/content/news/microsoft_ad_campaign_crashing

20081027 Microsoft Ad Campaign Crashing Nations Televisions

20050907 If technology Available Why Not WiFi?

If technology available, why not Wi-Fi?

http://news.mywebpal.com/news_tool_v2.cfm?pnpid=978&show=archivedetails&ArchiveID=1132527&om=1

Westminster Eagle

09/07/05 By Kevin E. Dayhoff

I've been fascinated with public Wi-Fi and all the possibilities it can provide Carroll County.

On Aug. 15, Silver Spring, in Montgomery County, announced that it now has public Wi-Fi - this put my random access memory into overdrive.

Wi-Fi (wireless fidelity) is a wireless high-frequency local area network that provides Internet access.

In June 2004, Newsweek previewed a sampling of 10 places in the world that are currently utilizing Wi-Fi. What caught my attention was the example of Hermiston, Ore., where the service covers 600-square-miles for a population of 13,200.

Can you imagine what it would be like to be anywhere in Carroll County and be able to go online for directions, restaurant menus or just to have access to information about all the exciting shops and businesses in the area?

Or download the latest corrections to your PowerPoint presentation from Bangalore, India, just before a meeting - just by powering up your laptop, Web browser enhanced cell phone, PDA or even a hand-held game device?

With the talent we have in Carroll, I would say that if it can be done in Hermiston, Oregon or Montgomery County, we could do it too.

Montgomery County is in the middle of an aggressive Wi-Fi initiative. The county is starting with the higher population areas first and then steadily expanding the coverage. The same approach would work in Carroll.

Alisoun Moore, Montgomery County Department of Technology Services Chief Information Officer, said that in Silver Spring, 10 unobtrusive antennae located on traffic signals, light poles and buildings provide the Wi-Fi service. This serves all downtown Silver Spring, (which is larger than the Main Street area of Westminster from Washington Road to McDaniel College).

Remember years ago when Silver Spring was a nondescript stretch of bypassed suburbia? Not so anymore. Go visit www.silversprung.com/home.html and see for yourself.

An Aug. 15, a Montgomery County press release stated, "The redeveloped Downtown Silver Spring, known as a hotspot for entertainment, dining and shopping, now is also a hotspot for wireless internet accessÉ

"The Community Wi-Fi initiative is designed to É (provide) no-cost community Internet access where it currently does not exist - in our open-air public places. É This endeavor demonstrates Montgomery County's commitment to the substantial benefits that broadband information access bringsÉ"

When I asked Moore how Montgomery County did it, the first words out of her mouth were music to my ears: "It's a private-public partnership. The county has very little money in it."

Atlantech Online provides the technical component in return for a $1,700 per year fee from the county. Atlantech is a local Internet Service Provider and for them it's a marketing piece.

Moore noted that, "Montgomery County did not want to get anyway near É competing with the private sector." This service is for public areas only.

Montgomery County Executive Doug Duncan said in a release, "The successful revitalization of downtown Silver Spring is a national model for urban redevelopment. After years of delays, I am proud that we were able to break the gridlock and get this project moving.

The area is now an arts and entertainment destination in the Washington, D.C. region, and our Wi-Fi agreement ensures that Silver Spring will remain on the cutting edge."

The consensus of an informal survey conducted locally was, yeah, there are questions to be answered; but let's roll up our sleeves and do it.

Wi-Fi presents unlimited opportunities for Carroll County.

Since the initiative would need to start in Carroll's municipalities, I contacted the Carroll County Maryland Municipal League Chapter President, Hampstead Mayor Haven Shoemaker.

Haven put it best: "I have many questions, but I'm willing to investigate any cost-effective private-public technology initiative that will stimulate economic development and quality of life for our citizens."

Taneytown Mayor Pro Tem Darryl Hale agreed, and Mount Airy Council President John Medve added that, "anything which enhances communication and access to government is a good thing."

I couldn't agree more.

Opportunities multiply once they are seized. The future is here, and Wi-Fi is a great opportunity for Carroll County.

Kevin Dayhoff writes from Westminster. E-mail him at: kdayhoff@carr.org.

©2004 MyWebPal.com. All rights reserved.
Contact us at webmaster@mywebpal.com
All other trademarks and Registered trademarks are property
of their respective owners.

20020130 Carroll Technology Council inaugural event Feb 20 2002

Wednesday, January 30, 2002

Carroll County Chamber of Commerce Invites You to the Carroll Technology Council's Inaugural event

February 20, 2002 from 4:30 - 6:30 pm,
83 E. Main Street in Westminster. $10 per person. Reservations required.

See what's been done with the Old Post Office...It's New Again!

BECOME A CHARTER MEMBER
Join that night and become a CHARTER MEMBER of the Carroll Technology Council
Get listed in the new directory
Meet people who can help you develop your business
Hear brief remarks about the CTC and the unveiling of their NEW LOGO
Be a part of Carroll's biggest new development
Receive discounts for the upcoming BIZtech Exposition
Enter to win a new CELL PHONE!
Enjoy food and drink

Please FAX or mail this form to Bonnie Grady at Carroll County Chamber of Commerce P.O. Box 871, Westminster, MD 21158(FAX: 410-876-1023) to reserve your spot.


Name_______________________________________________
Address_____________________________________________
City_____________________State______Zip_______________
Phone___________________E-mail_______________________
Credit Card: Visa - M/C - AMEX
No._____________________________Exp. Date____________

Kevin Dayhoff www.kevindayhoff.net http://kevindayhoff.blogspot.com/

Kevin Dayhoff: www.westgov.net Westminster Maryland Online www.westminstermarylandonline.net http://kevindayhoffwestgov-net.blogspot.com/