5 June 2015

Another epidemic of network worm intensified on Facebook. The scheme of distribution and users infection is very typical. On behalf of the victim in the feed of the social network appears the alleged links to the videos with meaningless descriptions (such as "323412341234"). A preview message that contains a video image has a provocative picture, such as a topless girl.  The friends of the victim also see the infected post.

The mechanism of infection is quite simple:

Clicking on the video it recommends to go to another site for watching.

After it is reported that the user cannot watch the video because of “codec” lack.

Does it recommend you to download software clicking on the "Run"? And actually this loaded “codec” is the virus.

Zillya! Lab experts note that even if you clicking on virus message, "virus" cannot be automatically activated.

Clicking on this message the users always have a suggestion to launch or not, for example to launch a player for watching videos, etc. Do not launch it.  Simple clicking on the virus post doesn't lead for infection - says Oleg Sych, Zillya! Lab CTO.

It is fair to say that Facebook has promptly responded and currently blocked the attempts to go to the links marked in the image, probably the virus can change the model of attack.