[Cindy]

ON THE INTERNET:

http://us.trendmicro.com/imperia/md/content/us/trendwatch/researchandanalysis/the_20heart_20of_20koobface_final_1_.pdf

[Cindy]

Blog:

http://ddanchev.blogspot.com/2009/10/koobface-botnet-redirects-facebooks-ip.html

WEDNESDAY, OCTOBER 21, 2009
“Koobface Botnet Redirects Facebook’s IP Space to my Blog”

(Posted by Dancho Danchev at Wednesday, October 21, 2009)

SNIPPET: “The result? Earlier this morning, I’ve noticed over 7,000 unique visits coming from Facebook Inc’s IP space using active and automatically blogspot accounts part of the Koobface botnet as http referrers (New Koobface campaign spoofs Adobe’s Flash updater), which is now officially relying on already infected hosts for the CAPTCHA recognition process.”

SNIPPET: “A representative from Facebook’s Security Incident Response Team just confirmed the development, and commented...”