Feeds

Twitter simps fall for 'Obama punched a guy' vid promise scam

Brits, Swedes keenest to see Prez swing a fist

Protecting users from Firesheep and other Sidejacking attacks with SSL

A spam campaign doing the rounds on Twitter that implausibly offers to show a picture, and then a video, of US President Obama punching someone in the face is ultimately designed to spread the infamous Koobface worm.

Prospective victims typically receive a direct message on Twitter, which contains the text “Check out Obama punch a guy in the face for calling him a n%£$*r”, and a malicious link to a fake Facebook page. This fake page confronts users with a request to submit their Twitter login credentials, as a blog post by Panda Security warns.

Users foolhardy enough to follow this request end up with compromised Twitter accounts, while their followers on the micro-blogging site receive further malware lures as direct messages, perpetuating the scam.

Instead of gaining access to the non-existent Obama right hook, victims are transported to a website that displays a fake YouTube video set against a fake Facebook background. Those stupid enough to go through with instruction to update their "YouTube player" to watch the video end up installing a variant of the Koobface worm.

The malware steals personal data from compromised machines.

Koobface is a strain of malware that has bedevilled social networking users (particularly on Facebook) since late 2008. The worms has earned scammers income principally through pay-per-install malware in the past, so the latest variant is a bit of a departure that essentially cuts out the middleman in personal data and ID theft scams.

It's unclear how many victims have been hit by the two-part Obama sucker punch scam, which represents another example of how cybercrooks are increasingly attempting to use social networks as a means to spread malware.

"This attack exploits the two most popular social networking sites, Facebook and Twitter, to trick users into believing they are viewing a trusted site," said Luis Corrons, technical director of PandaLabs. "It also relies on its victims’ curiosity by using a scandalous story involving US President Barack Obama and racism. Cyber-criminals know people are curious by nature and take advantage of this to trick users."

The countries most affected by this outbreak, which has claimed an estimated 2,000 victims, are the UK and Sweden, according to Panda.

Corrons added that users who follow a few common sense rules are far less likely to fall victim of these types of malware scams.

"As a general rule, always keep your antivirus software up to date and be wary of messages offering sensational videos or unusual stories as, in 99 percent of cases they are designed to compromise user security," he warned. ®

The next step in data security

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.