Tech & Biz

Galewher.com Facebook, Twitter Virus: Koobface Strikes Again

by Jordan Yerman | December 22, 2009 at 08:53 am

28445 views | 13 Recommendations | 12 comments

Galewher.com is a malware site that can hijack your Facebook account. If anyone on Facebook sends you any kind of message referring to Galewher.com or Galewher.c0m, their account has been infected. As always, never click on any suspicious links in social media messages. According to Softsailor, these malicious links are also appearing on Twitter, and is able to hijack Twitter accounts. Beware. Don't download anything associated with Galewher.com. Your will get pwned and then it's all tears.

Apparently, Galewher.com is an extension of the Koobface worm, which has been running amuck for some time now.

According to a report, behind the Galewher.com or Galewher.c0m Facebook virus is the Koobface Trojan. Please do not download anything while searching information about the Koobface Trojan or the Galewher.com Facebook virus. It seems like Facebook has acknowledged the existence of the virus and it’s trying to fix the problem.

I see nothing on Facebook's blog about Galewher.com at the moment, though.

0 See all footage | View Slideshow

Share: email story | add to any | | facebook | stumbleupon

recommend This comment thread is now closed

Cia (not verified)

at 17:41 on December 22nd, 2009

I got a message from a friend on my FB wall saying "This must be the perfect job for you GALEWHER.C0M"What should i do now!? Just change my password or what!?

Iron Monkey (not verified)

at 18:30 on December 22nd, 2009

Me too. Same message. Any advise? Thx

Healthy Bear (not verified)

at 18:29 on December 22nd, 2009

Hi Cia, it just means your friend's account has been hijacked. Do him/her a favour and bring it to his/her attention. Continue to be vigliant!

chaya n (not verified)

at 20:47 on December 22nd, 2009

i got the same message from a friend??what do i do???

isoraya (not verified)

at 01:55 on December 23rd, 2009

I haven't opened my FB for about a week now and when I opened it I just found out that galewher has posted some add using my account on my wall ... any idea what to do ?

thejournalizer (not verified)

at 07:49 on December 23rd, 2009

That information actually came from Play This magazine. So good job not sourcing properly. Crappy bloggers.

Jordan Yerman

at 08:51 on December 23rd, 2009

If you got a message like the ones mentioned above, don't click on any links or visit any sites that the message suggests. Let the person whose account sent the message that they need do reset their password; they should contact Facebook's support team as well.