Lucene search

K
thnThe Hacker NewsTHN:898552B5D961E7C3E122301A664F469D
HistoryDec 23, 2010 - 12:05 a.m.

W32.Yimfoca Worm Targets Facebook Users via Yahoo! Messenger

2010-12-2300:05:00
The Hacker News
thehackernews.com
5

7.1 High

AI Score

Confidence

Low

A new computer worm is denying Facebook users access to their accounts. The worm, named “W32.Yimfoca” by the security company Symantec, spreads through Yahoo! Messenger and specifically targets Facebook users. It forces them to complete surveys before they can log into their profiles.

The worm begins by sending an instant message containing a corrupted link. When a user clicks the link, the worm installs malware on their system. Later, when users visit Facebook, they see a message stating, “Your account is suspended. To make your account active, you need to complete one of these surveys,” followed by a list of options like “Test Your Celebrity IQ here” and “Win a FREE iPhone 4.”

If users choose to fill out a survey, another message appears: “You have only 3 minutes to fill out the selected survey or you will not have access to your account.” Each time a survey is completed, the creators of the worm earn $1, according to Symantec. The only way to regain access to your Facebook account is to complete one of these surveys.

“So long as W32.Yimfoca is running on your computer and you haven’t completed a survey, you will be blocked from accessing Facebook.com,” Symantec noted.

Symantec reported that this scam affects only users of the Internet Explorer web browser. Facebook is currently blocking users’ ability to share links containing this malicious content.

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.

7.1 High

AI Score

Confidence

Low