Today we got yet another sample of malware attacking Facebook. We detect this lot as Troj/Koobfa-A. It has some interesting characteristics. You can see how it attempts to log in to Facebook, look up friends, post a URL via TinyURL and logs out again. It also had the previous variant’s mark of the following pop-up:
Error installing Codec. Please contact support
You would think by now this would be old-hat and the authors would be bored and give up on it. Apparently not.