Important : Koobface, Other Worms Target Facebook Friends (NewsFactor)

- As Facebook works to make itself more relevant and timely for its growing member base with a profile page makeover, attackers seem to be working overtime to steal the identities of the friends, fans and brands that connect though the social-networking site.

Indeed, Facebook has seen five different security threats in the past week. According to Trend Micro, four new hoax applications are attempting to trick members into divulging their usernames and passwords. And a new variant of the Koobface worm is running wild on the site, installing malware on the computers of victims who click on a link to a fake YouTube video.

The Koobface worm is dangerous. It can be dropped by other malware and downloaded unknowingly by a user when visiting malicious Web sites, Trend Micro reports. When attackers execute the malware, it searches for cookies created by online social networks. The latest variant is targeting Facebook, but earlier variants have also plagued MySpace.

Koobface's Wicked Agenda

Once Koobface finds the social-networking cookies, it makes a DNS query to check IP addresses that correspond to remote domains. Trend Micro explains that those servers can send and receive information about the affected machine. Once connected, the malicious user can remotely perform commands on the victim's machine.

"Once cookies related to the monitored social-networking Web sites are located, it connects to these Web sites using the user log-in session stored in the cookies. It then navigates through pages to search for the user's friends. If a friend has been located, it sends an HTTP POST request to the server," Trend Micro reports.

Ultimately, the worm's agenda is to transform the victim's computer into a zombie and form botnets for malicious purposes. Koobface attempts to do this by composing a message and sending it to the user's friends. The message contains a link to a Web site where a copy of the worm can be downloaded by unsuspecting friends. And the cycle repeats itself.

An Attractive Face(book)

Malware authors are investing more energy in Facebook and other social-networking sites because that effort pays off, according to Michael Argast, a security analyst at Sophos. Facebook alone has more than 175 million users, which makes it an attractive target.

"Many computer users have been conditioned not to open an attachment from an e-mail or click a link found within, but won't think twice about checking out a hot new video linked to by a trusted friend on Facebook," Argast said.

Argast called the Koobface worm a mix of something old and something new. The new is using social networks as a method to spread malware. The old is using fake codec Trojans linked to a saucy video to induce the user to install the malware.

Argast said people can protect themselves by running up-to-date antivirus software, restricting which Facebook applications they install, thinking twice before clicking on links from friends and never, never installing a codec from some random Web site in the hopes of catching some celebrity in a compromised situation.

"I would expect to see more attacks on Facebook," Argast said. "As long as this is a successful propagation method, the bad guys will double down and invest more. They are entirely motivated by financial gain. If it pays, they'll continue to romp in your social playgrounds."

Putra-Design

SWOT ANALYSIS

Organizational strategies are the means through which companies accomplish their missions and goals. Successful strategies address four elements of the setting within which the company operates: (1) the company's strengths, (2) its weaknesses, (3) the opportunities in its competitive environment, and (4) the threats in its competitive environment. This set of four elements—strengths, weaknesses, opportunities, and threats—when used by a firm to gain competitive advantage, is often referred to as a SWOT analysis.

SWOT was developed by Ken Andrews in the early 1970s. An assessment of strengths and weaknesses occurs as a part of organizational analysis; that is, it is an audit of the company's internal workings, which are relatively easier to control than outside factors.

Conversely, examining opportunities and threats is a part of environmental analysis—the company must look outside of the organization to determine opportunities and threats, over which it has lesser control.

Andrews's original conception of the strategy model that preceded the SWOT asked four basic questions about a company and its environment: (1) What can we do? (2) What do we want to do? (3) What might we do? and (4) What do others expect us to do?

The answers to these questions provide the input for an effective strategic management process. While Andrews' original conception of this analysis has been developed and changed to the more streamlined SWOT analysis that we know today, his work is the foundation of this activity.

STRENGTHS, WEAKNESSES,OPPORTUNITIES, AND THREATS

Strengths, in the SWOT analysis, are a company's capabilities and resources that allow it to engage in activities to generate economic value and perhaps competitive advantage. A company's strengths may be in its ability to create unique products, to provide high-level customer service, or to have a presence in multiple retail markets. Strengths may also be things such as the company's culture, its staffing and training, or the quality of its managers. Whatever capability a company has can be regarded as strength.

A company's weaknesses are a lack of resources or capabilities that can prevent it from generating economic value or gaining a competitive advantage if used to enact the company's strategy. There are many examples of organizational weaknesses. For example, a firm may have a large, bureaucratic structure that limits its ability to compete with smaller, more dynamic companies. Another weakness may occur if a company has higher labor costs than a competitor
who can have similar productivity from a lower labor cost. The characteristics of an organization that can be strength, as listed above, can also be a weakness if the company does not do them well.

Opportunities provide the organization with a chance to improve its performance and its competitive advantage. Some opportunities may be anticipated, others arise unexpectedly. Opportunities may arise when there are niches for new products or services, or when these products and services can be offered at different times and in different locations. For instance, the increased use of the Internet has provided numerous opportunities for companies to expand their product sales.

Threats can be an individual, group, or organization outside the company that aims to reduce the level of the company's performance. Every company faces threats in its environment. Often the more successful companies have stronger threats, because there is a desire on the part of other companies to take some of that success for their own. Threats may come from new products or services from other companies that aim to take away a company's competitive advantage. Threats may also come from government regulation or even consumer groups.

A strong company strategy that shows how to gain competitive advantage should address all four elements of the SWOT analysis. It should help the organization determine how to use its strengths to take advantage of opportunities and neutralize threats. Finally, a strong strategy should help an organization avoid or fix its weaknesses. If a company can develop a strategy that makes use of the information from SWOT analysis, it is more likely to have high levels of performance.

Nearly every company can benefit from SWOT analysis. Larger organizations may have strategic-planning procedures in place that incorporate SWOT analysis, but smaller firms, particularly entrepreneurial firms may have to start the analysis from scratch. Additionally, depending on the size or the degree of diversification of the company, it may be necessary to conduct more than one SWOT analysis. If the company has a wide variety of products and services, particularly if it operates in different markets, one SWOT analysis will not capture all of the relevant strengths, weaknesses, opportunities, and threats that exist across the span of the company's operations.

LIMITATIONS OF SWOT ANALYSIS

One major problem with the SWOT analysis is that while it emphasizes the importance of the four elements associated with the organizational and environmental analysis, it does not address how the company can identify the

elements for their own company. Many organizational executives may not be able to determine what these elements are, and the SWOT framework provides no guidance. For example, what if a strength identified by the company is not truly a strength? While a company might believe its customer service is strong, they may be unaware of problems with employees or the capabilities of other companies to provide a higher level of customer service. Weaknesses are often easier to determine, but typically after it is too late to create a new strategy to offset them. A company may also have difficulty identifying opportunities.

Depending on the organization, what may seem like an opportunity to some, may appear to be a threat to others. Opportunities may be easy to overlook or may be identified long after they can be exploited. Similarly, a company may have difficulty anticipating possible threats in order to effectively avoid them.

While the SWOT framework does not provide managers with the guidance to identify strengths, weaknesses, opportunities, and threats, it does tell managers what questions to ask during the strategy development process, even if it does not provide the answers. Managers know to ask and to determine a strategy that will take advantage of a company's strengths, minimize its weaknesses, exploit opportunities, or neutralize threats.

Some experts argue that making strategic choices for the firm is less important than asking the right questions in choosing the strategy. A company may mistakenly solve a problem by providing the correct answer to the wrong question.

USING SWOT ANALYSIS TO DEVELOPORGANIZATIONAL STRATEGY

SWOT analysis is just the first step in developing and implementing an effective organizational strategy. After a thorough SWOT analysis, the next step is to rank the strengths, weaknesses, opportunities, and threats and to document the criteria for ranking. The company must then determine its strategic fit given its internal capabilities and externalenvironment in a two-by-two grid . This fit, as determined in the grid, will indicate what strategic changes need to be made. The quadrants in this grid are as follows:

Quadrant 1—internal strengths matched with external opportunities;
Quadrant 2—internal weaknesses relative to external opportunities;
Quadrant 3—internal strengths matched with external threats; and
Quadrant 4—internal weaknesses relative to external threats.

Quadrant 1 lists the strategies associated with a match between the company's strengths and its perceived external opportunities. It represents the best fit between the company's resources and the options available in the external market. A strategy from this quadrant would be to protect the company's strengths by shoring up resources and extending competitive advantage. If a strategy in this quadrant can additionally bolster weaknesses in other areas, such as in Quadrant 2, this would be advantageous.

Quadrant 2 lists the strategies associated with a match between the company's weaknesses with external opportunities. Strategies in this quadrant would address the choice of either improving upon weaknesses to turn them into strengths, or allowing competitors to take advantage of opportunities in the marketplace.

Quadrant 3 matches the company's strengths and external threats. Strategies in this quadrant may aim to transform external threats into opportunities by changing the company's competitive position through use of its resources or strengths. Another strategic option in this quadrant is for the company to maintain a defensive strategy to focus on more promising opportunities in other quadrants.

Quadrant 4 matches a company's weaknesses and the threats in the environment. These are the worst possible scenarios for an organization. However, because of the competitive nature of the marketplace, any company is likely to have information in this quadrant. Strategies in this quadrant may involve using resources in other quadrants to exploit opportunities to the point that other threats are minimized. Additionally, some issues may be moved out of this quadrant by otherwise neutralizing the threat or by bolstering a perceived weakness.

Once a strategy is decided on in each quadrant for the issues facing the company, these strategies require frequent monitoring and periodic updates. An organization is best served by proactively determining strategies to address issues before they become crises.

An example of how a firm can develop strategies using these quadrants is as follows. Generic Corporation produces high-quality; high-priced specialty kitchen items in a catalog and in stores and is known for their excellent customer service. This strength has been able to offset its major weaknesses, which are having few stores and no current capabilities for Internet sales. Its major opportunities come from the explosion of Internet shopping, and its threats are other more high-profile competitors, operating primarily on the Internet, and the concerns of identity theft in Internet sales that many customers have. Matching Generic's strengths to its opportunities (Quadrant 1), the firm may choose to enhance its Internet site to allow online purchases, still providing its excellent 24-hour telephone customer service.

Ideally, this strategy will offset the weakness of not having an Internet presence, which addresses the concerns of Quadrant 2. Additionally, by bolstering the strength of excellent customer service by applying it to the online shopping site, the company may be able to alleviate customer concerns about identity theft (Quadrant 3). A strategy for Quadrant 4, which matches the company's weaknesses and threats, is that Generic may consider selling its online business to a competitor. Certainly, the Quadrant 4 strategy is the least preferred, but a proactive strategy that plans for managing such a situation is favored over a crisis situation in which the company is forced to sell with no planning.

A SWOT analysis is a first, but critical, step in developing an organizational strategy. By examining the company's internal capabilities—its strengths and weaknesses and its external environment—opportunities and threats, it helps to create strategies that can proactively contend with organizational challenges.

FURTHER READING:

Andrews, K. The Concept of Corporate Strategy. Homewood, IL: R.D. Irwin, 1971.
Barney, Jay. Gaining and Sustaining Competitive Advantage. 2nd ed. Upper Saddle River, NJ: Prentice Hall, 2002.
Fleisher, Craig S., and Babette E. Bensoussan. Strategic and Competitive Analysis: Methods and Techniques for Analyzing Business Competition. Upper Saddle River, NJ: Prentice Hall, 2003.
Jackson, Susan E., and Randall S. Schuler. Managing Human Resources: A Partnership Perspective. 7th ed. Cincinnati, OH: South-Western College Publishing, 2000.

Prepared by :
Putra-Design