I have recently found this newsworthy research paper in PDF format by Trend Micro Threat Research, which explains the Koobface botnet in a detailed and understandable (also for non-professionals) way.
If you are interested, please read it here:
http://us.trendmicro.com/imperia/md/content/us/trendwatch/researchandanalysis/the_real_face_of_koobface_jul2009.pdf
If you are interested, please read it here:
http://us.trendmicro.com/imperia/md/content/us/trendwatch/researchandanalysis/the_real_face_of_koobface_jul2009.pdf