Now Koobface creates its own malicious web pages
Koobface - the long-running worm which first appeared 12 months ago - is being customised by hackers to crack security systems on website hosting services, and so allow it to auto-create its own web pages.
According to Andrew Brandt, a security researcher with Webroot, the auto-captcha utility has been greatly enhanced, allowing the Koobface worm to check whether an infected user has a Google or Blogspot account.
And, if theKoobface worm detects that an infected user does not have an account, the malware will create one automatically, he said. Koobface is now also capable of creating Google Reader pages on the fly, allowing the worm to create infected web pages which can be cross-reference in messages and wall postings infecting more people, Brandt added.
