Koobface propagates by sending notes to Facebook friends of someone whose PC has been infected. The messages, with subject headers like, “You look just awesome in this new movie,” direct recipients to a Web site where they are asked to download what it claims is an update of Adobe Systems Inc’s Flash player.
If they download the software, users end up with an infected computer, which then takes users to contaminated sites when they try to use search engines from Google, Yahoo, MSN and Live.com, according McAfee.
The Koobface virus also attacks users of the MySpace social networking site. Variants of the worm include Net-Worm.Win32.Koobface.a. and Net-Worm.Win32.Koobface.b.