Info-stealing Dorkbot worm spreading on Facebook

[Jack]

The Dorkbot worm, which first appeared in 2011 and has since been spreading via removable drives, IM programs and social networks, is currently targeting Facebook users.

The worm is delivered to potential victims via a chat message that appear to be coming from a friend and, at first glance, the link looks like it should take users to a regular JPG image file hosted on MediaFire.

But the file is actually an executable, and once run, it infects the targets' computer, tries to prevent the installed AV solution(s) from applying security updates, and then lies in wait, spying on the victims’ browsing activities and stealing their personal details and login credentials.

The IRC-based Dorkbot receives commands from a C&C server, and is capable not only of making the computer participate in DDoS attacks, but also of downloading additional malware.

According to Bitdefender, over 9,000 malicious links pointing to the malware have been detected in 24 hours, but Facebook is reacting quickly and blocking them.

Read more: http://www.net-security.org/malware_news.php?id=2495

 

[Ink]

Shouldn't this be prevented from within Facebook, with all the AV vendor partnerships going on..

 

[jamescv7]

Now that's I've suspicious even before, caused users are spreading that link with a jpg file.

Seems harmless from the first place but a second opinion is needed.

Old tactics way of propogation.

 

[DrBeenGolfing]

I keep getting spam from Fu*kbook, which I suspect might be a safer site than Facebook.

 

[Gnosis]

Facebook is a joke, imho.
If you are not important enough to talk to in person, or vice-versa, facebook is the place.
I wonder if the percentage of people on facebook that take mood altering pharmaceuticals is three times that of non-facebook users?

Your exterior becomes your interior, then you need a pill because you forgot how to be human, or at least interact with other humans without a keyboard or camera.

I am a Libertarian, so to each their own............just sayin'.

 

[DrBeenGolfing]

Ain't that the truth.

 

[McLovin]

I keep getting spam from Fu*kbook, which I suspect might be a safer site than Facebook.

Agreed, there. I get them all the time. Kinda annoying.