More Facebook fun with Koobface

Today we got yet another sample of malware attacking Facebook. We detect this lot as Troj/Koobfa-A. It has some interesting characteristics. You can see how it attempts to log in to Facebook,  look up friends, post a URL via TinyURL and logs out again. It also had the previous variant’s mark of the following pop-up:

Error installing Codec. Please contact support

You would think by now this would be old-hat and the authors would be bored and give up on it. Apparently not.