Like some other recent malware, this attack uses Google Reader to host the malware. The user sees a phony YouTube video. Clicking on it redirects the user to a malicious site disguised as a Facebook Help Center Warnings page with, ironically, tips for avoiding Koobface.

This page has a big download link for what it claims is a free virus scanner. This malware performs many tricks, including stealing your cookies and sending them to a remote server. But the really clever one is that it shows the user a CAPTCHA test and tells them to solve it. It uses this to create a new Facebook account.

Keeping your anti-malware up to date will generally block Koobface, a well-known attack, but use your common sense too.

»blogs.pcmag.com/securitywatch/20···_for.php