A family of malware worms that typically spreads through instant messaging, USB removable drives, websites or social media channels like Facebook and Twitter. Downloading and installing Dorkbot malware results in it opening a backdoor on infected computers, allowing for remote access and potentially turning the computer into a botnet.
The Dorkbot worm gained publicity in late 2011 for an attack on Facebook’s chat system, with users receiving a message with a bogus link that appeared to come from one of their Facebook friends. A similar Dorkbot worm appeared later in the same year, this time preying on Twitter users.
A new strain of Dorkbot targeting Skype users appeared in October 2012, with the Skype worm also installing ransomware in this case. The ransomware would threaten to lock a user out of being able to use their computer and demand a payment of several hundreds of dollars be made within a limited timeframe or have files on the computer deleted.