Koobface Malware Traced To 5 Russians

Solved by netwarerip · 2012-01-17 04:11 · Score: 1

Apparently 'Koobface' is Russian for "Sorry bro, but no one gives a rat's ass about your latest forays in Farmville".

Of course, reading the artilcle and seeing how sloppy they were in covering their tracks it's possible it just means "dumbass".

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 04:18 · Score: 0

does anything good ever come out of Russia?

Where's the Hate? by Anonymous Coward · 2012-01-17 04:20 · Score: 0

What, no ACs making blanket declarations about how evil this is? No piling on against the government? No insulting the people who live in that country?
Oh, it wasn't Americans doing it, so everyone doesn't have to turn on the flames and grab pitchforks.

Re:Where's the Hate? by Anonymous Coward · 2012-01-17 09:58 · Score: 0

Exactly.
You see, people from Russia admit to doing things like this, as evidenced from how the koobface gang has involved their families, registered businesses, etc.
The reason such accusations are made against Americans is that said Americans often live in a bubble that makes the late Steve Jobs' reality distortion field look like a cheesy pair of 3D glasses. It's the rest of the world (and US citizens) attempting to educate the US.

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 04:22 · Score: 0

What about those Russian dating agencies advertised on Slashdot? (The photos of the women look nice.)

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 04:23 · Score: 0

Girls. Remember them?

Re:In Soviet Russia... by Anonymous Coward · 2012-01-17 04:25 · Score: 0

In Soviet Russia jokes make you old.

Re:Normally, I oppose botnets and other malware st by K.+S.+Kyosuke · 2012-01-17 04:25 · Score: 2

Girls. Remember them?

Nope, I only remember the burly soldiers, before they left in 1990. But now that I'm thinking about it, it's quite possible that some of the burly soldiers were actually girls.

--
Ezekiel 23:20

Wow, Russians involved in cybercrime.... by Viol8 · 2012-01-17 04:25 · Score: 2

Well thats that mystery solved. Now if only I could remember where those damn bears went after they borrowed a toilet roll...

I don't have facebook by Anonymous Coward · 2012-01-17 04:26 · Score: 0

I dont care.
What I do care is if you try to make it a problem reaction solution game.

The Good, the bad and the Ugly by Anonymous Coward · 2012-01-17 04:30 · Score: 0

does anything good ever come out of Russia?

Math? Chess players?

GP:

Normally. In the case of Facebook I make an exception.

Yeah. I was constantly cleaning up family member's computers over that.

The good side: "Why aren't you on Facebook?"

"Koobface. Talk to the hand."

Well, it's a lot simpler than going through the privacy violations, whoring of personal data, etc, etc, etc ....

Here's my father in law's reason (he has top secret double something or another clearance with defense contractors) "I have to keep my security clearance and Facebook is a no-no."

So, "I'm applying to jobs that require a security clearance and therefore a Facebook account is a no-no."

Re:The Good, the bad and the Ugly by Anonymous Coward · 2012-01-17 04:46 · Score: 0

> Here's my father in law's reason (he has top secret double something or another clearance with defense
> contractors) "I have to keep my security clearance and Facebook is a no-no."
Gaylord, is that you?
Re:The Good, the bad and the Ugly by plopez · 2012-01-17 04:56 · Score: 1

Here's my father in law's reason (he has top secret double something or another clearance with defense contractors) "I have to keep my security clearance and Facebook is a no-no."
Does he take all his sensitive documents home with him on a USB so he can keep them safe? ;)

--
putting the 'B' in LGBTQ+
Re:The Good, the bad and the Ugly by mjwalshe · 2012-01-17 12:37 · Score: 1

Didn't seem to stop the current C getting the top job in SIS (MI6) though did it? A more nuanced approach would be to have face book etc and use it as part of your cover.

WHAT a COUNTRY! by Thud457 · 2012-01-17 04:34 · Score: 1

nah, wasn't funny even in 1984...

--

the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

Eastern European Malware by omganton · 2012-01-17 04:40 · Score: 3, Interesting

It seems that most malware originates from the Eastern European block, mainly Russia and the former USSR nations. I wonder if this is economically driven or socially driven. Is the creation of malware an attempt to generate revenue (via trojans that must be "purchased" to unlock all features and "remove infections"), or is it some type of political statement against the rest of the internet. If there was great revenue to be had, you'd think the malware would come from all over the world. Why the isolation to such a specific area?

Re:Eastern European Malware by jeyk · 2012-01-17 05:00 · Score: 2

I personally think it is economically driven. The definition of "great revenue" is not the same in different parts of the world.
Re:Eastern European Malware by Anonymous Coward · 2012-01-17 05:24 · Score: 2, Interesting

It seems that most malware originates from the Eastern European block, mainly Russia and the former USSR nations. I wonder if this is economically driven or socially driven. Is the creation of malware an attempt to generate revenue (via trojans that must be "purchased" to unlock all features and "remove infections"), or is it some type of political statement against the rest of the internet. If there was great revenue to be had, you'd think the malware would come from all over the world. Why the isolation to such a specific area?
To get decent malware, you basically need (A) Reasonably smart/skillful technical people and (B) a lack of legitimate jobs that pay better than stealing
Most places that have A don't have B, but it is unfortunately common in some parts of the Eastern block.
Re:Eastern European Malware by cecom · 2012-01-17 05:45 · Score: 5, Informative

I come from Eastern Europe and I think that it is socially driven. Corruption is so prevalent in absolutely every aspect of life - from traffic tickets to simply buying something in the store. So "white collar" crime like this is socially acceptable.
It is most definitely not economically driven - in Eastern Europe there is a huge hunger for competent developers, so unless Russia is an exception (I doubt it), it is easy to find a legal well paying programming job.
Full disclosure: I left Eastern Europe a long time ago and I am not Russian, but I am extrapolating from my own country.
Re:Eastern European Malware by Torvac · 2012-01-17 06:28 · Score: 1

Why the isolation to such a specific area?
could ask any banker/pirate/priest in the vatican the same question. because you wont get caught there.
Re:Eastern European Malware by Anonymous Coward · 2012-01-17 06:37 · Score: 1

As a Ukrainian I completely agree with parent, it is absolutely true - except grocery stores - never had to bribe anyone :)
This type of crime is absolutely insignificant in the eyes of the authority.
Disclaimer: I have also left eastern europe some time ago :)
Re:Eastern European Malware by mapkinase · 2012-01-17 06:57 · Score: 4, Informative

The factor is disregard for somebody else's property, starting from communal property and private property. Decades of communistic approach to property lead to generation of thiefs, when practically everybody had no moral qualms about stealing practically anything, especially badly guarded.
I remember the time when I first came to US, I was in the lab with postdocs like myself, from Soviet Russia, and one of them was quite excited about the discovery that one can manipulate the odometer to decrease the reading and not be penalized for a leased car.
Russians could be very moral and compassionate to other people, but the area of property is moral tabula rasa for Russians.
Stealing, breaking, damaging, vandalizing, wasting - all kind of things one can do with property in Russia, except for investing, saving, multiplying...

--
I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
Re:Eastern European Malware by Pecisk · 2012-01-17 08:03 · Score: 3, Informative

I strongly disagree (yeah, I'm coming from Eastern Europe). If that would be true new generations would be example of politeness and respect to each other.
It has little to do with abolishment of private property (In fact, for Bolshevist elite owning something a lot wasn't a issue, government couldn't take your property away just because they would like to after sixties). Main reason was butchering of middle intelligence of Eastern Europe during Stalin and WWII times. Lot of them where Jews, lot of them where liberals, lot of them where actual communists (yeah, Stalin loved to push his way how he sees future to people). Both sides - Bolshevists and Nazi - killed them in hundred thousands. Society were raped brutally. It resulted in lot of perversions you see today in Russia and Eastern Russia.
Without people as example respect to each other became extinct and with it - respect to other property (because it is related with respect to other feelings and opinion).
And in the end, correction - Communism never calls for abolishment of property, it calls for abolishment of capital property used for manufacturing. And it calls for respecting collective property. I know, I know, human nature can't wrap his mind around it - BS, I don't believe that. We choose because it is more convenient to tell us that no one can stop greed.

--
user@ubuntubox:~$ stfu This server is going down for shutdown NOW!
Re:Eastern European Malware by LanceUppercut · 2012-01-18 07:14 · Score: 1

97% of malware originates in USA. This is a well-known fact, which has been posted and discussed even here on /. repeatedly. Russia does produce malware, but most of it targets the local market. The reason this piece is making the news is that we are observing the rare case when foreign malware is detected on US market. This is indeed a rather strange and curious occurrence, since it makes no practical or economical sense for the perpetrators.
Re:Eastern European Malware by Anonymous Coward · 2012-01-19 03:44 · Score: 0

97% of malware originates in USA. This is a well-known fact, which has been posted and discussed even here on /. repeatedly.
No, it's not, or if it has, I haven't seen it. Try another repetition with references this time, please.

Re:Normally, I oppose botnets and other malware st by NonUniqueNickname · 2012-01-17 04:42 · Score: 4, Funny

"Librum facium"? Your Latin skills deserve in faciem palma.

GOD'S GARBAGE DUMP !! by Anonymous Coward · 2012-01-17 04:48 · Score: 1

Because in Soviet Russia it is dismal every day, with all hope abandoned !! If it were not for cheap and plentiful vodka, bodies would litter the streets instead of filth !!

Re:GOD'S GARBAGE DUMP !! by Anonymous Coward · 2012-01-17 09:54 · Score: 0

Vodka is not cheap in Russia for Russians. Even the bathtub vodka (vodichka) made from beet sugar is costly.
Re:GOD'S GARBAGE DUMP !! by utkonos · 2012-01-17 16:03 · Score: 1

Not sure where you live, but in Piter vodka is pretty cheap. 200 rub will get you a decent bottle of Z Mark, and that works out to about $6. The same size bottle of vodyara in the US would cost about $25. If you spend that kind of money in Russia, you'll be buying Tsarskaya or Gaufman. Then there's my favorite place, Ukraine. Everything is crazy cheap there, I love it. Go visit the city of Nemirov in Ukraine. That's where they make Nemiroff Vodka. Nice.

Job Security by virgnarus · 2012-01-17 04:51 · Score: 1

"We found em! Now let's just publicly release our information prior to the suspects being apprehended so that they can discover they've been found and cough up a small percentage of their illegally-garnered wealth to hide themselves from the officials and force the investigation to continue for years to come!"

Re:Job Security by Zocalo · 2012-01-17 05:04 · Score: 2

According to the story the information was already shared with select members of the security community and relevent law enforcement, which presumably includes the St. Petersberg PD where most of the suspects seem to spend a lot of their time. I'm guessing this public release of the data is because local enforcement have yet to act on the information (or have already been bribed to ignore it) and this is an attempt to give things a nudge in the right direction.

--
UNIX? They're not even circumcised! Savages!
Re:Job Security by ios+and+web+coder · 2012-01-17 06:58 · Score: 1

Sadly, I doubt there's evidence that can be used to actually convict them.
However, the story is an object lesson on the dangers inherent in modern social networks.
If THESE folks can get found out (note that some of them were actually "ratted out" by their own Significant Others), then the normal mensch on FaceBook is pretty much screwed.

--
"For every complex problem there is an answer that is clear, simple, and wrong."
-H. L. Mencken
Re:Job Security by Anonymous Coward · 2012-01-17 07:39 · Score: 0

The article also mentions that someone already leaked that the people involved had been identified, which means releasing the story doesn't tell the involved parties anything they didn't already know.

Re:Normally, I oppose botnets and other malware st by plopez · 2012-01-17 04:53 · Score: 2

You're probably thinking of the women's olympic teams.

--
putting the 'B' in LGBTQ+

Re:Normally, I oppose botnets and other malware st by Synerg1y · 2012-01-17 05:12 · Score: 1

A large amount of exploits, viruses, malware, spyware that is then later analyzed by American "security experts", who marvel at the ingenuity. Coding tends to be better on an empty stomach I guess.

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 05:16 · Score: 1

the vodka, the AK-47, the T-34, the black shark, the women, the sputnik, etc.

Leaves one to wonder... by damn_registrars · 2012-01-17 05:18 · Score: 1

How many cybercrime gangs are operating in Russia these days? Are they competing with each other, collaborating with each other, or are they mostly ignoring each other?

And more importantly, could something useful be extracted from that?

--
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.

Re:Leaves one to wonder... by Em+Adespoton · 2012-01-17 07:42 · Score: 1

Google partnerka :) The answer is "all of the above" -- sometimes even among the same gangs at the same time.

Re:Normally, I oppose botnets and other malware st by K.+S.+Kyosuke · 2012-01-17 05:22 · Score: 1

You're probably thinking of the women's olympic teams.

Well, those were often composed of burly female soldiers anyway. ;)

--
Ezekiel 23:20

Re:Normally, I oppose botnets and other malware st by Spectre · 2012-01-17 05:26 · Score: 1

What about those Russian dating agencies advertised on Slashdot? (The photos of the women look nice.)

Interesting ... I get ads for data integration and server hosting ... how do I get YOUR ads? ;-)

--
"Flame away, I wear asbestos underwear"

Re:Normally, I oppose botnets and other malware st by Forty+Two+Tenfold · 2012-01-17 05:39 · Score: 3, Insightful

Coding tends to be better on an empty stomach I guess.

Plenus venter non studet libenter.

--
Upward mobility is a slippery slope - the higher you climb the more you show your ass.

Re:Normally, I oppose botnets and other malware st by muyla · 2012-01-17 05:39 · Score: 1

Start Browsing more 4chan and pron and less tech websites until their adsense realises that you are a tipical basement dweller...

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 05:40 · Score: 0

It is based on what you have searched lately (or just generic if you havent searched)
The other AC was apparently looking for those sites previously.

In Soviet Russia... by Anonymous Coward · 2012-01-17 05:43 · Score: 0

In Soviet Russia, car analogy references you!

fun read, seemed well researched by mrflash818 · 2012-01-17 05:45 · Score: 1

Fun read, interesting, scary, and a "D'Oh!" all in one.

--
Uh, Linux geek since 1999.

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 06:05 · Score: 0

Sophos != American

Re:Normally, I oppose botnets and other malware st by Synerg1y · 2012-01-17 06:27 · Score: 1

Well said!

Have-You-Heard? by Anonymous Coward · 2012-01-17 06:27 · Score: 0

There's a virus from St. Petersburg!

Re:Have-You-Heard? by Anonymous Coward · 2012-01-17 07:29 · Score: 0

What they're saying on the street?

Re:Normally, I oppose botnets and other malware st by wiedzmin · 2012-01-17 06:32 · Score: 1

does anything good ever come out of Russia?

Ballet? Vodka? :)

--
Bow before me, for I am root.

Sad by ThatsNotPudding · 2012-01-17 06:38 · Score: 2

We (US-ians) can croak known terrorists on foreign soils without much in the way of permission, but we can't get these guys?

Re:Sad by Anonymous Coward · 2012-01-17 07:31 · Score: 0

Why? Perhaps they even did not think that the Koobface will became so common.

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 06:52 · Score: 0

General Patton was right and Truman should have listened.

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 07:07 · Score: 0

You mean DISEASE VECTORS?

Re:In Soviet Russia... by Thud457 · 2012-01-17 07:20 · Score: 1

isn't Bookface one of the super villains in "The Tick"?!!!

--

the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

Re:Normally, I oppose botnets and other malware st by Anonymous Coward · 2012-01-17 07:31 · Score: 0

(Sophos (American) Sophos)
SophosLabs operates out of Abingdon UK, Vancouver Canada, Sydney Australia, Burlington MA USA, Wiesbaden Germany and Zagreb Croatia. The analysts in question operate out of Germany, I believe.

Re:Normally, I oppose botnets and other malware st by alexo · 2012-01-17 08:09 · Score: 1

What about those Russian dating agencies advertised on Slashdot? (The photos of the women look nice.)

Sure, if you're into dating photos.

Re:Normally, I oppose botnets and other malware st by vikingpower · 2012-01-17 17:06 · Score: 1

Gratias ago tibi, amice, per correctionem. "Librum" quidem forma accepta est per "liberum"; "facium" necnon genitivus pluralis est. Error ubi est ?

--
Religous speak to God. Insane are spoken to by God. When all shut up, one can finally hear Shostakovich in peace

Lessons learned by G04T · 2012-01-18 02:12 · Score: 1

Having RTFA yesterday I think this taught some valuable tips on what NOT to do. For instance:

1) Don't use the same handle for your malicious activities that you do for everything else. Sure it's 1337 and shit to have a recognizable handle, I mean who doesn't wanna be the next Zero Cool, amirite? But it might be a good idea to use a separate identity to commit crimes.

2) If you're going to have your malware freaking *text* you, pick up a few cheap burn phones for your gang to use.

Without this information in their scripts and on the server we'd still be sitting around not having a clue who was behind this.

Ugh.. Americanism of cerebral cortex by LanceUppercut · 2012-01-18 07:30 · Score: 1

Ugh... Americanism of cerebral cortex is running strong on /. today. Considering that the amount of "loose money" in Russia is about two orders of magnitude higher than in USA, why would Russian hackers ever target USA? Do hackers anywhere in the world target Zimbabwe? Ivory Coast? Haiti? Hackers target rich populations with high accessibility of "easy money", i.e. countries with large number of proverbial blondes carrying around 1-2 millions of US dollars cash as pocket money. And that spells "Russia". Bit a piss-poor craphole like USA??? Why would any hacker target it? Last occurrence of Russian hackers targeting anyone outside of Russia was recorded sometime around 2003. And now we get a suspiciously well-written piece with another set of fantastic claims... Sounds like someone in USA is trying to compensate for their inferiority complex by their delusion of grandeur :) Did Condoleezza Rice get back in the office? If not, who's guiding this 50-cent army on Slashdot? That's the question that needs answering.

Slashdot Mirror

Koobface Malware Traced To 5 Russians

64 comments