{{위키데이터 속성 추적}}
{{Infobox computer virus
| Image          = 
| Common name    = 쿱페이스
| Technical name = 
| Aliases        = 
* OSX/Koobface.A ([[Intego]])
* W32/Koobfa-Gen ([[소포스]])
* W32.Koobface.A ([[시만텍]])
* W32/Koobface.worm ([[맥아피]])
* WORM_KOOBFACE.DC ([[트렌드 마이크로]])
* Win32/Koobface ([[CA 테크놀로지스]])
* Worm.KoobFace ([[Malwarebytes]])
* Net-Worm.Win32.Koobface.a ([[카스퍼스키 안티바이러스|카스퍼스키]])
* Worm/Win32.Koobface ([[펜다]])
* Worm/Win32.Koobface ([[노턴]])
* Worm/Win32.Koobface ([[웹루트]])
* Worm/Win32.Koobface ([[아바스트]])
| Family         = 
| Classification =
| Type           = [[웜]]
| Subtype        = [[악성 소프트웨어]]
| IsolationDate  = 
| Origin = 러시아
| Author         = 
}}

'''쿱페이스'''({{lang|en|Koobface}})는 [[마이크로소프트 윈도우]], [[macOS]], [[리눅스]]를 공격하는 네트워크 웜이다.<ref>{{웹 인용|url=http://news.softpedia.com/news/New-Koobface-Variant-Infects-Linux-too-163450.shtml|title=New Koobface Variant Infects Linux Systems|author=Lucian Constantin|date=28 October 2010|work=softpedia|accessdate=3 February 2015}}</ref><ref>{{웹 인용|url=http://news.softpedia.com/news/Linux-Java-Based-Trojan-Might-Have-Been-an-Accident-163848.shtml|title=Linux Java-Based Trojan Might Have Been an Accident|author=Lucian Constantin|date=30 October 2010|work=softpedia|accessdate=3 February 2015}}</ref><ref>{{웹 인용|url=http://blog.intego.com/more-information-about-the-koobface-trojan-horse-for-mac/|title=More Information About the Koobface Trojan Horse for Mac|date=October 29, 2010|publisher=[[Intego|The Mac Security Blog]]|accessdate=2012-01-20}}</ref> 이 웜은 원래 [[페이스북]], [[스카이프]], [[야후! 메신저]] 등의 네트워킹 웹사이트, 그리고 [[Gmail]], [[야후! 메일]], [[AOL 메일]] 등의 이메일 웹사이트의 사용자들을 목표로 잡았다. 또다른 목표로는 [[마이스페이스]], [[트위터]],<ref>{{웹 인용 |url=http://www.us-cert.gov/current/archive/2009/03/04/archive.html#malicious_code_targeting_social_networking |제목=US-CERT Malicious Code Targeting Social Networking Site Users, added March 4, 2009, at 11:53 am |확인날짜=2019-12-14 |보존url=https://web.archive.org/web/20090512192108/http://www.us-cert.gov/current/archive/2009/03/04/archive.html#malicious_code_targeting_social_networking |보존날짜=2009-05-12 |url-status=dead }}</ref> 등의 다른 네트워킹 웹사이트도 포함되며 동일 로컬 네트워크의 다른 장치들을 감염시킬 수 있다.<ref>{{웹 인용|url=http://status.twitter.com/post/138789881/koobface-malware-attack|title=Twitter Status - Koobface malware attack|work=twitter.com|accessdate=3 February 2015}}</ref> 기술 지원 사기꾼들은 가짜 팝업과 내장 윈도우 프로그램을 사용하여 이들의 컴퓨터에 쿱페이스를 감염시키는 것이 의도였다고 거짓 주장을 펼치기도 했다.<ref>{{웹 인용|url=http://www.abqjournal.com/595377/fake-tech-support-warning-targets-apple-users.html|title=Fake tech support warning targets Apple users|last=Marks|first=Ellen|publisher=[[Albuquerque Journal]]|date=June 7, 2015}}</ref><ref>{{웹 인용|url=http://kdminer.com/main.asp?SectionID=1&subsectionID=797&articleID=69540 |title=Warnings are out there, but people keep falling for scams |last=Ricca |first=Aaron |publisher=[[The Kingman Daily Miner]] |date=April 6, 2016 |url-status=dead |archiveurl=https://web.archive.org/web/20160409214608/http://kdminer.com/main.asp?SectionID=1&SubSectionID=797&ArticleID=69540 |archivedate=April 9, 2016 }}</ref><ref>{{웹 인용|url=http://www.southbendtribune.com/news/business/woman-almost-falls-for-computer-scam/article_469dd31b-d3f4-5f7b-805b-8b4d4f538b90.html|title=Woman almost falls for computer scam|last=Jensen|first=Dreama|publisher=[[South Bend Tribune]]|date=February 26, 2016}}</ref>

== 감염 ==
일부 웜의 종류가 식별된다:
* Worm:Win32/Koobface.gen!F<ref>{{웹 인용|url=http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Worm:Win32/Koobface.gen!F&threatid=2147631531|title=Worm:Win32/Koobface.gen!F|publisher=Microsoft|work=microsoft.com|accessdate=3 February 2015}}</ref>
* Net-Worm.Win32.Koobface.a: [[마이스페이스]]를 공격
* Net-Worm.Win32.Koobface.b: [[페이스북]]을 공격<ref>{{웹 인용 |url=http://www.finjan.com/MCRCblog.aspx?EntryId=2317 |제목=Koobface malware distribution technique - automatic user account creation on FaceBook, Twitter, BlogSpot and others |확인날짜=2019-12-14 |보존url=https://web.archive.org/web/20100328072623/http://www.finjan.com/MCRCblog.aspx?EntryId=2317 |보존날짜=2010-03-28 |url-status=dead }}</ref>
* WORM_KOOBFACE.DC: [[트위터]]를 공격<ref>{{웹 인용|url=http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KOOBFACE.DC|title=WORM_KOOBFACE|work=trendmicro.com|accessdate=3 February 2015}}{{깨진 링크|url=http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KOOBFACE.DC }}</ref>
* W32/Koobfa-Gen: [[페이스북]], [[마이스페이스]], [[hi5]], [[Bebo]], [[Friendster]], myYearbook, Tagged, Netlog, [[Badoo]], fuba를 공격r<ref>{{웹 인용|url=http://www.sophos.com/blogs/gc/g/2009/03/02/sophos-stops-new-version-of-koobface-worm/|title=Sophos stops new version of Koobface social networking worm|work=Naked Security|accessdate=3 February 2015|보존url=https://web.archive.org/web/20100717062129/http://www.sophos.com/blogs/gc/g/2009/03/02/sophos-stops-new-version-of-koobface-worm/|보존날짜=2010-07-17|url-status=dead}}</ref><ref>[http://community.ca.com/blogs/securityadvisor/archive/2009/05/31/the-allure-of-social-networking.aspx The Allure of Social Networking, describes Win32/Koobface affecting multiple social networks as described on CA's Security Advisor Research blog] {{webarchive|url=https://web.archive.org/web/20110722131124/http://community.ca.com/blogs/securityadvisor/archive/2009/05/31/the-allure-of-social-networking.aspx |date=2011-07-22 }}</ref>
* W32.Koobface.D<ref>{{웹 인용|url=http://www.symantec.com/security_response/writeup.jsp?docid=2009-080717-5930-99|title=W32.Koobface.D|work=symantec.com|accessdate=3 February 2015}}</ref>
* OSX/Koobface.A: 페이스북, 마이스페이스, 트위터 등 소셜 네트워크를 통해 확산되는 [[macOS|맥]] 버전.<ref>{{웹 인용|url=http://blog.intego.com/intego-security-memo-trojan-horse-osxkoobface-a-affects-mac-os-x-mac-koobface-variant-spreads-via-facebook-twitter-and-more/|title=Intego Security Memo: Trojan Horse OSX/Koobface.A Affects Mac OS X Mac – Koobface Variant Spreads via Facebook, Twitter and More - The Mac Security Blog|work=The Mac Security Blog|accessdate=3 February 2015}}</ref>

== 같이 보기 ==
* [[트로이 목마 (컴퓨팅)]]
** [[Trojan.Win32.DNSChanger]]

== 각주 ==
{{각주}}

== 외부 링크 ==
* [http://nakedsecurity.sophos.com/koobface The Koobface malware gang - exposed!], research by Jan Droemer and Dirk Kollberg.
* [http://us.trendmicro.com/imperia/md/content/us/trendwatch/researchandanalysis/the_real_face_of_koobface_jul2009.pdf The Real Face of KOOBFACE], analysis by Trend Micro.
* [http://yro.slashdot.org/story/10/11/13/1732205/Researchers-Take-Down-Koobface-Servers?from=rss Researchers Take Down Koobface Servers], Slashdot article.

[[분류:웜]]
[[분류:페이스북]]
[[분류:마이스페이스]]
[[분류:트로이 목마]]
[[분류:2000년대 해킹]]