Koobface unexpectedly appears upon shutdown of HK server

VIP LOUNGE

CLOUD LOGIN

You are here: News > News > Koobface unexpectedly appears upon shutdown of HK server

» IT Security NEWS

» 24 April 2010

Koobface unexpectedly appears upon shutdown of HK server

About a week ago, a group of security specialists won the long-term battle against Koobface bonnet and was able to shut down its key component. However, they observed the server’s unforeseen appearance at China.

Cruel things must come to an end

Web criminals are the ones responsible in directing the component of the Koobface FTP grabber. This wicked device works by uploading the FTP usernames and passwords, which are illegally obtained, to the server of Koobface. Hence, the online thugs gained quick entry through the systems of different companies and their important information with the use of the stolen log-in data before the experts were able to accomplish the shutdown a week ago.

Most contribution for the successful takedown is from the Hong Kong Computer Emergency Response Team Coordination Centre or HKCERT.

Not for long, the tactful managers of the Koobface transferred their server to a China-based hosting firm. In addition, the servers designated for the command and control linked with Koobface took a series of upgrades a month ago.

Cheating is possible in various imaginative ways

Koobface connects with online users through the use of messages. These messages are distributed through the popular social networking services such as the Facebook and Twitter.

The online crooks, who created the high-level malicious software, utilize various ways so as to illegally earn great amount of money. These people spread the scareware packages to users with high-risk computer systems. They also make use of online scamming such as stealing of important information from various users.

No lesser evils for anything that is deemed harmful

There are two separate malicious entities that frightened the online community: the malicious software that initiated online attacks in Google China, and the sophisticated Conficker worm. But then, this malware obtained the least press compared to the others. In addition, security specialists regarded these two as equally complicated and a larger danger to many online users today.

In response to this, the well-known security firm Trend Micro created a blog post in order to explain in detail what FTP grabber is like. Also, it was made clear in this post how the security experts actually succeeded in shutting down the Koobface server at Hong Kong in their operation.

Know more about SecPoint through the following helpful links: SecPoint Products, SecPoint News, and SecPoint Awards.