Cyber-criminals looking at social networks in finding preys – experts

VALENCIA, Spain: Facebook, MySpace and other social networking sites are increasingly being targeted by cyber-criminals drawn to the wealth of personal information supplied by users, experts warn.

Data posted on the sites—name, date of birth, address, job details, e-mail and phone numbers—is a windfall for hackers, participants at Campus Party, one of the world’s biggest gatherings of Internet enthusiasts, said.

A vicious virus Koobface—”koob” being “book” in reverse—has affected thousands Facebook and Twitter users since August 2008, said Asier Martinez, a security specialist at global IT solutions provider Panda Security.

“Its spread has been very significant and it has been detected in 4,000 different variants,” he told Agence France-Presse at the week-long event which wraps up Sunday in Valencia in eastern Spain.

The virus hijacks the accounts of social networking site users and sends messages steering friends to hostile sites containing malware, malicious software often designed to infiltrate a computer system for illicit purposes.

In one of its variants, Koobface sends the victim a warning that its Flash player is outdated along with an invitation to download a new version, which is in fact the virus.

Malware can be used to steal bank account data or credit card information once installed on a personal computer.

Facebook has sought to resist attacks by Koobface and similar viruses by blocking links to hostile sites and shutting down accounts from users that show signs of infection, such as sending too many messages.

“You also must be very careful with people who ask to join your friends list,” said Laura Garcia, who writes a popular blog about Internet security, adding that hackers often sent requests.

Another danger of social networking sites are the popular quizzes, horoscopes and games made available for free to users which can sometimes be used to hide links to hostile sites, she added.

Birthday greetings and well as messages sent at Christmas and other holidays may also appear to come from friends when in fact they are linked directly to sites that try to convince would-be victims to reveal personal information like passwords or bank numbers, said Martinez. — AFP