Windows Worm Targets Skype Users
495666
VOIP service Skype is warning users about a Windows worm that spreads through the Skype's chat service, posing as a legitimate chat message.
744060
Some Skype users were left vulnerable to a possible worm attack Wednesday after company technicians failed to disable a buggy component of the network.Skype&#160;pulled the plug on its &quot;Add Video to Chat&quot; feature&#160;Tuesday after security researcher Aviv Raff reported that it suffered from a serious vulnerability. An attacker could create a self-copying worm program that could be used to&#160;install malicious software on victims&#39; machines&#160;and then go on to infect other Skype users.&quot;Add Video to Chat&quot; lets users pick videos from two sites -- Dailymotion.com and Metacafe.com -- and add them to their Skype chat sessions.Skype blocked access to these sites Tuesday after Raff&#39;s disclosure, effectively disabling the feature.But because of a misconfigured Skype proxy server, some users were still allowed to access the Metacafe videos, leaving them vulnerable to an attack, said Raff, who had been in discussions with Skype engineering staff over this issue.Because Raff has not publicly released his exploit code, the oversight probably doesn&#39;t pose a serious security risk for most Skype users, Raff noted.Skype expects to patch the underlying vulnerability sometime next week, said a spokeswoman for Metacafe. That&#39;s later than previously expected. On Tuesday, Metacafe said that a patch was due early Wednesday morning.Metacafe believes it&#39;s unlikely that an attacker could successfully exploit the flaw in a widespread attack, but with Raff&#39;s proof of concept code, a Skype user has to simply click on a maliciously crafted Web link in order to be infected.According to Raff, Skype uses a Windows Internet Explorer component with an inappropriate security setting. Instead of rendering HTML from the Internet with the more secure &quot;Internet Zone&quot; security setting, Skype uses IE&#39;s &quot;Local Zone&quot; security setting, usually reserved for more trustworthy content.Skype representatives did not return calls seeking comment for this story.
551615
FOSTER CITY, Calif., Sept. 18  /PRNewswire/ -- Research experts at FaceTime Security Labs(TM), the threat research division of IM and greynet security leader FaceTime Communications, today identified and reported a new worm known as W32.pipeline that is propagating over AOL Instant Messenger.
271741
Sophos released a warning yesterday about a worm that has the capability to use webcams to spy on computer users in their home or workplace.
342444
A new worm has been discovered in the wild that&#39;s not just settling for invading users&#39; PCs - it wants to invade their homes, too.
10244
Security researchers are warning of a new worm, dubbed &quot;Funner,&quot; targeting Microsoft&#39;s MSN Messenger instant messaging application.
109419
SMiShing A mass mailing worm that attempts to trick users into downloading malware in response to bogus text messages is spreading in Spain.â¦
573269
Virus hijacks PCs and uses them to send short message spam to mobile phones.
521752
After a relatively quiet fall, mass-mailing worm begins to spread on Windows PCs. Meanwhile, the Air Force turns to Microsoft for security help.
121737
Symantec said when someon clicks on an infected link in a message, the worm tries to download code from remote sites, to redirect users to certain Web sites and to send a version of itself to everyone in an IM user&#39;s contact list as well.
219854
A Trojan which uses infected PCs to send spam messages to mobile phone users has been discovered.
278665
Despite recent security patches, worms to attack Windows could be in the works.
461844
A new worm that spreads via Microsoft&#39;s instant messaging client began badgering users Monday, several security firms said. Dubbed Funner, the worm propagates by sending itself to all the contacts listed in
334880
A new family of worms which uses an unpatched vulnerability in Internet Explorer is spreading widely across the net.
125692
(InfoWorld) - Skype users are under attack from aÂ new wormÂ that spreads through the peer-to-peer Internet phone application'sÂ chat feature. The attack begins when a user receives an instant message containing a link from someone in their contact list or an unknown Skype user, said Villu Arak, a Skype spokesman based in Tallinn, Estonia. There are several versions of the chat messages, which are "cleverly written" to fool users, Arak wrote on the Skype heartbeat blog. The link appears to contain a JPEG photo file, but if clicked causes the Windows run/save dialog box to appear, which asks whether the user wants to save or run a ".scr" file. The file is malicious software that can then access a user's PC via Skype's API (application programming interface). The malicious file has been named W32/Ramex.A. "Users whose computers are infected with this virus will send a chat message to other Skype users asking them to click on a web link that can infect" their computers, Arak wrote. To avoid trouble, users should not download the file. At least two security vendors, F-Secure and Kaspersky Lab, have updated their software to detect the worm, Arak wrote. Instant message programs are another way hackers can try to gain control over PCs. Access to one person's instant messenger or e-mail account can mean contact details for many others, allowing hackers to use malicious e-mails or instant messages to lure victims into downloading malicious software. Â
710162
Security researchers warned Monday of a new worm, dubbed "Funner," targeting Microsoft Corp.'s MSN Messenger IM (instant messaging) system.
169493
A new Internet worm was spreading quickly, threatening to overload computer systems around the world by generating copies by e-mail, security experts said.