Is this normal for Koobface?

Discussion in 'other security issues & news' started by acr1965, Jul 31, 2010.

Thread Status:
Not open for further replies.
  1. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,964
    I get a suspicious Facebook email that has a link to what's eventually an .exe download after a redirect. I check the .exe through virustotal and it's detected in 14/42 scanners. I then get another email with another suspicious url link, but to a different site. Same thing- redirect and .exe download. I check virustotal for that .exe and notice that again 14/52 scanners detect the malware. I then check the md5 hash and they are the same.
     
  2. chrisretusn

    chrisretusn Registered Member

    Joined:
    Jun 16, 2004
    Posts:
    1,380
    Location:
    Philippines
    While it may look like it, I doubt it is from Facebook. It just run of the mill spam.
     
  3. littlebits

    littlebits Registered Member

    Joined:
    Jul 7, 2006
    Posts:
    262
    Facebook never sends out email with links to installers (.exe files), because if it has a link then it is spam, report it and delete it , never click on the links or download any files.

    Always check the full headers on each email, if it is not from for example:*@facebook.com, then it is not from Facebook.

    Thanks.:)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.