Backdoor Leads to Facebook and Multi-Protocol Instant Messaging Worm

A new attack is spreading via Facebook and several instant messaging applications. Its chief payload is a backdoor – BKDR_LIFTOH.DLF – which allows its attackers to take control of the infected systems. It spreads by using two worms, once of which is a new variant of the rather notorious DORKBOT family. DORKBOT is known for for spreading…