Is this normal for Koobface?

Discussion in 'other security issues & news' started by acr1965, Jul 31, 2010.

Thread Status:
Not open for further replies.
  1. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
    I get a suspicious Facebook email that has a link to what's eventually an .exe download after a redirect. I check the .exe through virustotal and it's detected in 14/42 scanners. I then get another email with another suspicious url link, but to a different site. Same thing- redirect and .exe download. I check virustotal for that .exe and notice that again 14/52 scanners detect the malware. I then check the md5 hash and they are the same.
     
  2. chrisretusn

    chrisretusn Registered Member

    Joined:
    Jun 16, 2004
    Posts:
    1,322
    Location:
    Philippines
    While it may look like it, I doubt it is from Facebook. It just run of the mill spam.
     
  3. littlebits

    littlebits Registered Member

    Joined:
    Jul 7, 2006
    Posts:
    262
    Facebook never sends out email with links to installers (.exe files), because if it has a link then it is spam, report it and delete it , never click on the links or download any files.

    Always check the full headers on each email, if it is not from for example:*@facebook.com, then it is not from Facebook.

    Thanks.:)
     
Thread Status:
Not open for further replies.