After spreading via social networking site Facebook several months back, the Koobface virus appears to be back, this time spreading via torrent and peer-to-peer file sharing.
Computer security firm Trend Micro said that the virus, which turns computers it infects into a peer-to-peer botnet, now uses Trojanized shared application files.
"Based on our research, we found a 'loader' being used by KOOBFACE, which is a component responsible for downloading other components. This loader arrives on the victim's computer either by downloading Trojanized torrent files, or through a new component of KOOBFACE named 'tor2.exe,' which is detected as WORM_KOOBFACE.AV," Trend Micro said in a blog post.
Computer security firm Trend Micro said that the virus, which turns computers it infects into a peer-to-peer botnet, now uses Trojanized shared application files.
"Based on our research, we found a 'loader' being used by KOOBFACE, which is a component responsible for downloading other components. This loader arrives on the victim's computer either by downloading Trojanized torrent files, or through a new component of KOOBFACE named 'tor2.exe,' which is detected as WORM_KOOBFACE.AV," Trend Micro said in a blog post.
No comments:
Post a Comment