Computer security firm: Worm spreads via Facebook private messages

Social networking and chat addicts, be warned: A new worm is spreading on Facebook and instant messaging services, distributing a link that leads to a malicious file, a computer security firm warned this week. Trend Micro said the malicious file, which contains the word "Facebook" in its name, poses as a zip file that contains an executable file. "Once executed, this malware (detected as WORM_STECKCT.EVL) terminates services and processes related to antivirus (AV) software, effectively disabling AV software from detection or removal of the worm. WORM_STECKCT.EVL also connects to specific websites to send and receive information," it said. It added the worm downloads and executes another worm, one detected as WORM_EBOOM.AC. Trend Micro said its analysis showed WORM_EBOOM.AC is capable of monitoring an affected user’s browsing activity such as message posting and deleted posted messages. Also, it can monitor private messages sent on Facebook, Myspace, Twitter, WordPress, and Meebo. It is even capable of spreading through the mentioned sites by posting messages containing a link to a copy of itself. Trend Micro said that while cybercriminals' exploiting of Facebook and IM applications to connect is nothing new, there are users who still fall prey to these schemes. "We recommend users to be conscious with their online behavior, in particular on social media sites," it said. — LBG, GMA News