Harry Waldron - Corporate IT Security

New Koobface variants are sending malicious URLs to Twitter users.  AV protection has emerged for many products since these attacks surfaced on Friday and users should avoid unusual URLs in social networking systems, email, instant messaging, or any other environment. Twitter has been deactivating infected accounts to gain better control from these attacks.

Twitter Security Alert on Koobface
http://status.twitter.com/post/138789881/koobface-malware-attack
http://blog.trendmicro.com/koobface-increases-twitter-activity/

QUOTE: Some users’ PCs have been infected with a variant of the Koobface malware. This malware sends bogus tweets when the user logs into Twitter. We are currently suspending all accounts that we detect sending such bogus tweets. If we suspend your account, we will send you an email notifying you of the suspension. This email also includes tips for removing the malware from your PC.

What is Koobface
http://en.wikipedia.org/wiki/Koobface

QUOTE: Koobface, an anagram of Facebook ("face" and "book" change order and "koob" is "book" in reverse), is a computer worm that targets the users of the social networking websites Facebook, MySpace [1], hi5, Bebo, Friendster and Twitter. Koobface ultimately attempts, upon successful infection, to gather sensitive information from the victims such as credit card numbers.