User:Neelansh1992

Koobface is a Network worm that attacking Microsoft Windows, Mac OS X, and Linux Platforms. This computer worm originally targeted users of the networking websites like Facebook, Skype, Yahoo Messenger and email websites such as Gmail, Yahoo Mail, and AOL Mail.This infection allows Attacker to get into your personal information like your card information, stealing password and other personal data, Game coins and can lock games as well.This infection is a security risk and should be removed from your network ), MySpace, Friendster and Twitter. It can infect other devices(Phone,tablet, computer) on the same local network (Internet). New computers can get this infection from old computer or from email.   Windows 10 is more effected operating system than widnows 7.  This infection stop drivers and services of computer to make them stop working.It block IP address on network so that it can block any output device(Printer).

'''Koobface do not allow antivirus (Mcafee, Norton, Kaspersky) to go in computer because it is a coding infection network Worm. Need to be fix on computer and network on same time. '''

Infection
Yahoo and Gmail faced this problem in 2016. More than Million email accounts and computers were Hacked. It then uses compromised computers to build a peer-to-peer botnet. A compromised computer contacts other compromised computers to receive commands in a peer-to-peer fashion. The botnet is used to install additional pay-per-install malware on the compromised computer and hijack search queries to display advertisements. Its peer-to-peer topology is also used to show fake messages to other users for the purpose of expanding the botnet. It was first detected in December 2014 and a more potent version appeared in March 2015. A study by the Information Warfare Monitor, a joint collaboration from SecDev Group and the Citizen Lab in the Munk School of Global Affairs at the University of Toronto, has revealed that the operators of this scheme have generated over $2 million in revenue from June 2014 to December 2015.

Koobface originally spread by delivering Facebook messages to people who are 'friends' of a Facebook user whose computer had already been infected. Upon receipt, the message directs the recipients to a third-party website (or another Koobface infected PC), where they are prompted to download what is purported to be an update of the Adobe Flash player. If they download and execute the file, Koobface can infect their system. It can then commandeer the computer's search engine use and direct it to contaminated websites. There can also be links to the third-party website on the Facebook wall of the friend the message came from sometimes having comments like LOL or YOUTUBE. If the link is opened the trojan virus will infect the computer and the PC will become a Zombie or Host Computer.

Among the components downloaded by Koobface are a DNS filter program that blocks access to well known security websites and a proxy tool that enables the attackers to abuse the infected PC. At one time the Koobface gang also used Limbo, a password stealing program.

Several variants of the worm have been identified:
 * Worm:Win32/Koobface.gen!F
 * Net-Worm.Win32.Koobface.a, which attacks MySpace
 * Net-Worm.Win32.Koobface.b, which attacks Facebook
 * WORM_KOOBFACE.DC, which attacks Twitter
 * W32/Koobfa-Gen, which attacks Facebook, MySpace, hi5, Bebo, Friendster, myYearbook, Tagged, Netlog, Badoo and fubar
 * W32.Koobface.D
 * OSX/Koobface.A, a Mac version which spreads via social networks such as Facebook, MySpace and Twitter.

In January 2012, the New York Times reported that Facebook was planning to share information about the Koobface gang, and name those it believed were responsible. Investigations by German researcher Jan Droemer and the University of Alabama at Birmingham's Center for Information Assurance and Joint Forensics Research were said to have helped uncover the identities of those responsible.

Facebook finally revealed the names of the suspects behind the worm on January 17, 2012. They include Stanislav Avdeyko (leDed), Alexander Koltyshev (Floppy), Anton Korotchenko (KrotReal), Roman P. Koturbach (PoMuc), Svyatoslav E. Polichuck (PsViat and PsycoMan). They are based in St. Petersburg, Russia. The group is sometimes referred to as Ali Baba & 4 with Stanislav Avdeyko as the leader. The investigation also connected Avdeyko with CoolWebSearch spyware.