From TechCrunch:
The worm spreads when a compromised user?s account is used to send message to others with a title such as ?LOL. You?ve been catched on hidden cam, yo:? and a link to a random URL. The linked website is a YouTube-like page that shows a video player along with what looks like a standard browser message to update your Flash installation. Clicking on the button begins a malware installation of a file called ?codecsetup.exe.? We didn?t go so far as to install the software, but our guess is that it zombies your computer, installs a keylogger, and other fun stuff. A nasty feature of the worm is that it takes the profile picture of the sending infected user and adds it to the linked website. This makes it all look much more legitimate for the potential victim.
Full story: https://www.techcrunch.com/2008/08/0...rus-spreading/
The worm spreads when a compromised user?s account is used to send message to others with a title such as ?LOL. You?ve been catched on hidden cam, yo:? and a link to a random URL. The linked website is a YouTube-like page that shows a video player along with what looks like a standard browser message to update your Flash installation. Clicking on the button begins a malware installation of a file called ?codecsetup.exe.? We didn?t go so far as to install the software, but our guess is that it zombies your computer, installs a keylogger, and other fun stuff. A nasty feature of the worm is that it takes the profile picture of the sending infected user and adds it to the linked website. This makes it all look much more legitimate for the potential victim.
Full story: https://www.techcrunch.com/2008/08/0...rus-spreading/
Comment