Social engineering tactics of the Koobface botnet

by Dancho Danchev  |  October 14, 2009 7:09am PDT  |  Image 9 of 12

Previous  |  Next

Scareware affiliate network used by Koobface botnet

Starting in later September, 2009, the Koobface botnet became a major player in the scareware business model by including a pop-up script on each and every of the hundreds of thousands of infected hosts. Rotating the scareware domains every 24 hours results in a lower detection rate, which helps them better monetize the botnet.

Talkback Most Recent of 2 Talkback(s)

  • Koobface October 2009 Youtube spoof
    You might want to check out the 3rd image for the article "Koobface October 2009 Youtube spoof". There is some words in it that some might not want to see.
    ZDNet Gravatar
    michaelgaris@...
    22nd Oct 2009
  • Bottom Line...
    Never download flash from anywhere but adobe, and if a
    site says your player is out of date, then manually go to
    adobe yourself. If adobe says your flash player is up to
    date, another site says it's not and wants you to install
    from a .exe from their site, then it's time to rip your
    ethernet cable from the wall, immediately unplug your
    computer, open case, remove hd, call a priest for an
    exorcism, then finish by shooting said hd with silver
    bullets and soaking the corpse generously with holy
    water... You know, just in case...
    ZDNet Gravatar
    edwards.wb
    26th Feb 2010

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
Click Here

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity