This from the FBI's Infragard alert for 12/22:
39. December 21, Help Net Security – (International) Worm blocks access to Facebook. A relatively new worm Symantec named "W32.Yimfoca" presents a never before seen modus operandi. A variant of the worm spreads via Yahoo! Messenger and, once installed, downloads and installs W32.Yimfoca on the target system. Lately, it has been noticed it specifically targets Facebook users by denying them access to their accounts if they do not complete a survey. Every time a user lands on the Facebook homepage, a window offering the surveys pops up. Also, while the victim fills out the survey, a progress bar is shown accompanied by a "threat" - "You have only 3 minutes to fill out the selected survey or you will not have access to your account." Once the user has completed a survey he/she can access his/her account. If the user does not complete the survey within 3 minutes, the worm will not allow him/her to access the account while it is running - and it resets even after a reboot of the infected computer. The worm blocks access to Facebook only if Internet Explorer is being used. Using any other browser fails to trigger the worm and a user can access his/her Facebook account without being sidetracked by pop-ups. Source: http://www.net-security.org/malware_news.php?id=1575
No comments:
Post a Comment