Court Jester attacks Facebook users

INSECURITY EXPERTS at Sophos are warning that hackers are disseminating messages containing malicious links on Facebook's Wall.

The messages reportedly urge users to watch a video that appears to be hosted on a Google website. Users that attempt to view the purported clip are redirected to http://www.google.com.id.[removed] and instructed to download an executable file to watch the video.

However, a Trojan designated as Troj/Dloadr-BPL is downloaded to the victim's machine instead. Once loaded, the program executes additional malicious code (Troj/Agent-HJX) and displays a laughing court jester with a protruding tongue.

According to Graham Cluley, senior technology consultant for Sophos, there has been a recent rash of dangerous emails posing as innocent links to videos.

Cluley recommended that businesses defend themselves with a web security and control appliance that will “filter internet access and prevent the downloading of malicious code”. µ