Malware disguised as Skype Defender
3066
Skype warns users password-stealing Trojan horse is making the rounds, disguised as a Skype security plug-in
184247
A programming error in eBay&#39;s Skype communications software could give cybercriminals a new way to sneak their malicious software onto a victim&#39;s PC.The flaw, which was reported Thursday by security researcher Aviv Raff, has to do with the way that Skype makes use of a Windows Internet Explorer component to render HTML. Because Skype does not apply strict security controls to the software, an attacker could run scripting code on the victim&#39;s system in a dangerous fashion and ultimately install malicious software.The problem is that Skype runs the IE component with the less locked-down &quot;Local Zone&quot; security setting. Because of this attackers are able to do &quot;all sorts of things... [such as] reading/writing files from the local disc and launching executables,&quot; wrote security researcher Petko Petkov, in a Thursday blog post about the issue.For an attack to work, the bad guys would first need to find a trustworthy Web site that contained a common programming flaw called a cross-zone scripting error. This bug would give them a way to trick Skype into running their malicious script as if it came from a trusted Web site.In a video posted to his blog, Raff showed how a cross-zone scripting flaw on the Dailymotion.com Web site could be exploited to launch the calculator program in Windows, using Skype&#39;s &quot;Add video to chat&quot; feature.&quot;The user simply needs to visit DailyMotion via Skype&#8217;s &#39;Add video to chat&#39; button and stumble upon a move which contains the cross-site scripting vector,&quot; Petkov wrote.Worse, attackers could flood the site with maliciously encoded advertisements in order to boost their likelihood of infecting a victim, he said. &quot;This type of attack is very easy to pull and it requires almost zero preparation.&quot;The flaw affects the latest version of Skype -- version 3.6.0.244 -- Raff said. Older versions of the software may also be at risk. &quot;Until the Skype guys fix this vulnerability, I recommend that you stop searching for videos in Skype,&quot; he wrote.Skype representatives could not be reached immediately for comment.
478642
Skype users are under attack from a new worm that spreads through the peer-to-peer Internet phone application's...
372247
A Trojan horse computer program that uses infected computers to churn out mobile phone spam messages is causing concern among antivirus firms.
634495
New security software supplements antivirus protection by scanning systems for &#39;bot&#39; malware that can take over unprotected PCs.
54319
New worm spreads through Skype's chat feature, infects PCs with malware.
573269
Virus hijacks PCs and uses them to send short message spam to mobile phones.
209318
At least it's not stealthy, one supposes: A newly reported Trojan not only tries to delete all the user's files, but plays a highly annoying audio clip as it does so.
482426
Skype Ltd. has patched a critical vulnerability that had forced it to cull several features from its VoIP and chat software to stop attackers from hijacking users' PCs.
16229
(InfoWorld) - Computer security analysts are studying reports of a worm that may be circulating via a feature in Skype's popular VOIP (voice over Internet protocol) service. Security vendor Websense said the worm spreads through Skype's chat feature. Users receive a message asking them to download a file called "sp.exe." The executable is a Trojan horse that can steal passwords. If a user runs the Trojan it triggers another set of code to spread itself. The first infected PCs appeared in the Asia-Pacific region, particularly in Korea, Websense reported on its blog on Tuesday. It said it was still investigating the issue. Not all security experts were in agreement, however. F-Secure received a sample of the worm and determined that it did not, in fact, target Skype, said Mikko Hypponen, chief research officer. "What's clear is, there's no massive worm outbreak with Skype at the moment," Hypponen said. "We are following the situation." The SANS Internet Storm Center said it was "hearing some details of a new worm spreading via Skype IM" and asked for more information in a posting on its site. Websense said the executable appears to be encrypted with NTKrnl Secure Suite Packer, a polymorphic encryption program that makes files look unique to different detection engines. The original site that hosted the code is not serving it any more, Websense said. Â
464065
Malware that spreads via Yahoo Messenger also plays screeching music and hijacks IE's home page.
121737
Symantec said when someon clicks on an infected link in a message, the worm tries to download code from remote sites, to redirect users to certain Web sites and to send a version of itself to everyone in an IM user&#39;s contact list as well.
143342
A vulnerability in Internet Explorer spells potential trouble for Skype users who add or play video in their chats.
84253
Scammers are sending out fake security bulletins that attempt to install malicious software on victim's PCs.
206847
A newly identified malicious program not only messes up its victims' computers, it taunts them too.
219854
A Trojan which uses infected PCs to send spam messages to mobile phone users has been discovered.
527993
Malware arrives in German spam that claims to contain an update from Microsoft.