(adsbygoogle = window.adsbygoogle || []).push({}); A new variant of Trojan Carberp is geared to fool Facebook users that their accounts are locked and that they have to pay a ransom to get access to your account. When the victim uses a computer infected by Trojan-Carberp sent him on to a false start for Facebook to announce that the account is locked. The user then invited to enter their name, email address, password, birth date and transaction number on a Ucash transfer of EUR 20 to approve the reading of the account. The fake page report that Ucash-sum will be added to the user's' Facebook balance ", which of course is not true.
You must login or register to view this content.
The page that racketeers created looks like a legitimate Facebook page and it can be difficult for an unwitting victim to understand that they are exposed to a fraud.


Anders Nilsson security specialist at Eurosecure, distributor of ESET NOD32 Antivirus, explains:

- In this case works Carberp as a so-called man-in-the-browser, an attack form that resembles a man-in-the-middle attack. The Trojan monitors the various API's you that Windows reads and writes on the web and can thus replace the page that appears - in this case, a fake Facebook page. Since Carberp have control over your computer so you can not rely on the url shown. No one knows that one is infected, it's hard to know that you are the victim of fraud.

- Carberp is widely spread in Eastern Europe and Russia.

At a time when more and more have backup their important files in your computer, try blackmailer find new ways to scare users into paying money. Currently Facebook is a rewarding target when the target of the attack is very large, while Facebook's user both confident side and also are terrified of getting rid of information or control over their account.
You must login or register to view this content.
The picture shows the code to Carberps "Facebook plugin" looks like. It matches all URLs that contain "*//* facebook.com / * ", and replace it with a static content, stating that one must verify the age and country by paying with Ucash. Money that you then will get back when verification is complete.

anonymous transfers
By using Ucash is also the risk that the fraudsters detected minimal, since Ucash can be likened to an anonymous cash. Fraudsters can receive a payment and immediately put the money they earned at other sites online, or sell e-money on.

At the usual similar attacks against such bank login pages is required, in principle, always fraudster at some point have to transfer money between bank accounts to access them, increasing the risk that they get caught. Therefore, it has become increasingly common for scammers use different payment services and direct transfers.

Needed some form of regulation or supervision of the management of so-called e-money?

- Anonymity can have negative backs, but I can still not claim to be for some form of regulation, it is a panacea, I do not really trust. However, it is important that computer users who have had their computers infected with trojans and serious botnätsklienter get out there and play Internet providers an important role. In extreme cases it may be time to shut down access to the network completely, for example, when you see that one computer sends large amounts of spam, which some Swedish ISPs are already doing, says Anders Nilsson.


People pay so please don't say that noone would pay

Regards
Doxis /AluAir

lol if you are stupid enough to pay a ransom you get everythging you deserve in my opinion,good job lfor etting the community know doh.

Some people has stuff on their facebook that is much more worth then money.
Imagine if they uploaded all their photos ect ect...

Linux can be affected by viruses, but since every linux distro is different, then if you got a virus to work on one distro, it might not work on another, so if you coded a virus you wouldn't infect many people.
That's why most viruses are coded for windows, as Windows is the most popular OS, and a virus coded to work on vista, will work on 7, and maybe XP.

Just like Steve Jobs said, MAC cant get virus, mac can get virus, mobile devices can get virus, you mp3 can get a virus.
nothing is virus proof and this trojan in not even system based.

Actually EVERYONE says Mac's are virus proof. If I were you I'd stop acting like your a computer technician now. You're not. /endof

I said stop ACTING like a computer technician, which you were. If you ask any Mac fanboy they swear they can't get a virus. Okay Smartass? Don't bother replying as I won't say anything back. Good day.

Wow, honestly.. If I got something like that towards my Facebook I would not give a crap. I don't really use Facebook a whole lot, so no difference to me.

1) Set up an index page pretending to be facebook.com and demanding ransom to sign in using PHP/HTML You must login or register to view this content. You must login or register to view this content.
2) You must login or register to view this content.
3) You must login or register to view this content. + You must login or register to view this content.
4) Add this to host files 39.39.39.39 being the IP of your facebook ransom page: 39.39.39.39 69.171.224.11
5) Infect lots of Facebookers and enjoy profits