Are you a Sucker?

Are you a Sucker?

By Gerald Internet Anthropologist Think Tank

Just like Conficker, the Koobface botnet is no stranger to the scareware business modeland the potential for monetization of the hundreds of thousands of infected hosts.

However, changes made in the campaign structure of the Koobface botnet during the last couple of days, indicate that the Koobface gang has embedded a pop-up at each and every host that's automatically rotation different scareware brands. They're now officially monetizing the botnet using a scareware business model.

dangerWindAdr = 61.235.117.83/ popup.php loads on each and every Facebook spoof page part of the botnet and is then redirecting the most popular scareware template, the My computer Online Scan.

SOURCE:

XXXXXXXXXXXXXXXXXXXXXXXXXXXX

If you get a warning that you have malware.

Don't panic, STOP, UNPLUG THE INTERNET CONNECTION.

Ok your disconnected and safe, they can't get

anything off your machine if you disconnect it.

Gather your thoughts, and start by checking

out where the warning came from.

The bad guys are inventing new fake security

sites every day, can't keep track of all the

bad security sites, but we can keep track

of the good safe security sites.

Ok after the panic settles, and you see the warning didn't come from your security

software, and you have run a scn with your own safe security program,

plug back into the net

Go here:

http://warintel.blogspot.com/2009/09/300-fake-internet-security-vendors.html

To check if its an approved site.

If you can determine the warning came from

a site not on this list, ignore the fake warning.

You have run your own scan from your approved security

programs.

And can check to see the warning is not from a approved

security site, don't buy the program.

If no one buys the fake security programs,

they FAIL. DON'T BE A SUCKER...

Gerald

.