Close
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Subscribe
Logo
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Subscribe
    Home Cybersecurity
    • Cybersecurity
    • IT Management
    • Networking

    Koobface Gang Boosts Web Traffic, Profits from Pay-per-Click Scams

    Written by

    Fahmida Y. Rashid
    Published December 23, 2011
    Share
    Facebook
    Twitter
    Linkedin

      eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

      The group behind the Koobface is back, and they are reinventing themselves to take advantage of pay-per-click advertising, according to Trend Micro.

      The Koobface developers updated their botnet framework with a “sophisticated” traffic-direction system (TDS) that handles traffic referenced to their affiliate sites, Trend Micro researchers reported Dec. 19. They’ve also added components to help increase the amount of Internet traffic, “which translates to even bigger profit,” Jonell Baltazar, senior threat researcher at Trend Micro, wrote on the company’s Malware Blog.

      It appears that the TDS may also be offered as a service to others, according to Trend Micro.

      The TDS reroutes traffic to advertising sites from which they earn referral money or to several of their affiliate sites. Websites relying on referrals from advertising and affiliate sites earn more money when overall Internet traffic to their sites increases, according to Baltazar.

      “TDS creation definitely provided the Koobface gang a means to more efficiently target celebrity fans, online daters, casual porn surfers and car enthusiasts,” said Baltazar.

      The group created and registered email addresses using Yahoo’s free Webmail service, according to Trend Micro. With these email addresses, they could then generate new accounts on Google and various social-networking sites, such as Twitter, Tumblr and Blogger. The domains for the various blogs contained words such as “news” or “2011 news,” and contained blog posts with pictures of celebrities, weddings, tattoos and cars culled from Google’s image search, according to Trend Micro.

      Links to these posts were shared on various social networks to encourage people to click and view the fake blog content. TDS tracks the number of visits coming from various links around the Web and redirects users to other affiliate sites. The botnet makes money from the clicks victims make while browsing, as well as from the total traffic generated, according to Baltazar.

      The Koobface gang also actively spread related keywords on the Web to promote the blog posts.

      “The Koobface gang is clearly still up to no good and will most probably continue victimizing users,” Baltazar said.

      The group is thought to have made more than $2 million between June 2009 and June 2010 through pay-per-click and pay-per-install affiliate programs pushing fake antivirus software onto unsuspecting users, according to Information Warrior Monitor, a joint venture backed by researchers from the SecDev Group and the Citizen Lab in the Munk School of Global Affairs at the University Toronto.

      When unsuspecting users clicked on a Koobface link, they were redirected to one of the provided advertisement links instead of their intended destination, IWM researchers wrote in their whitepaper last fall.

      Koobface was first spotted in December 2008, and has been making the rounds on Facebook, MySpace and Twitter. As the malware proliferated, the operators of the botnet kept building new countermeasures to stay a step ahead of security researchers; these measures included a “banlist” of IP addresses that are forbidden from accessing Koobface servers and a tool to ensure the most updated versions of the malware was running. The operators also monitored their links with the Google Safe Browsing API to check whether the URLs have been flagged as being malicious, and collected statistics such as the number of malware installations and the speed and availability of the Web servers hosting their landing pages, IMW found.

      Fahmida Y. Rashid
      Fahmida Y. Rashid

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      MOST POPULAR ARTICLES

      Artificial Intelligence

      9 Best AI 3D Generators You Need...

      Sam Rinko - June 25, 2024 0
      AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
      Read more
      Cloud

      RingCentral Expands Its Collaboration Platform

      Zeus Kerravala - November 22, 2023 0
      RingCentral adds AI-enabled contact center and hybrid event products to its suite of collaboration services.
      Read more
      Artificial Intelligence

      8 Best AI Data Analytics Software &...

      Aminu Abdullahi - January 18, 2024 0
      Learn the top AI data analytics software to use. Compare AI data analytics solutions & features to make the best choice for your business.
      Read more
      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Video

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2024 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.