Trojan horse targets Skype users

Miscreants have again adapted the Warezov Trojan horse to target Skype users, Websense Security Labs warned on Thursday.

The attack is similar to threats that target instant-messaging applications. A targeted Skype user will receive a chat message with the text "Check up this" and a link to a malicious executable called "file_01.exe" on a Web site, Websense said in an alert. If the user runs the file, several other files are downloaded and run, it said.

Once infected, a computer will be at the beck and call of the attacker and the Trojan horse will start sending messages to the victim's Skype contacts to propagate, Websense said. The attack is similar to one reported in February, but it has been adapted with files hosted at different locations and a new version of the malicious code, the security company said.

Skype has acknowledged in the past that its instant-messaging feature could be used for nefarious purposes just like any other IM service. The company has said that it is looking at partnerships with security firms to offer a capability for the Skype client that filters out malicious links.

"Harmful viruses and Trojan horses may damage a user's computer and collect private data, regardless of whether a person is using Skype, e-mail or IM clients," Kurt Sauer, Skype chief security officer, said Friday. Skype warned users against opening the malicious file and said they should take caution in general when opening attachments. The company also recommends using antivirus software to check incoming files, Sauer said.

Warezov, also known as Stration, has been around since at least September. Several variants of the malicious code have appeared. Miscreants have spread it via spam e-mail, as well as Skype.

More from News.com on this story's topics

VoIP and IP telephony

Create an email alert | RSS feed

Viruses and worms

Create an email alert | RSS feed

Instant messaging

Create an email alert | RSS feed

See more CNET content tagged:
Skype, Kurt Sauer, Websense Inc., trojan horse, IM

Add a Comment (Log in or register) 4 comments (Page 1 of 1)
Trojan Horses, No Problem. Just Buy Websense's crap
by Schratboy March 23, 2007 12:27 PM PDT
I'm becoming ever more dubious about the so-called threat claims from these security technology vendors. This isn't to diminish specific threat conditions, but I've become weary because invariably all these problems are rendered null, moot and "no worries" if organizations adopt a proactive security approach. I'm sure the dullard marketing wizards at Websense would disagree, arguing that every organization should buy their Web filtering/Content stopping solutions and pay their yearly ransom...er, I mean service fee and should be happy to do so. After all, they'll be afforded protection from every known threat the product looks for. The problem is that the cost doesn't match the protection. Threat variants change daily reducing the effectiveness of these technology-based solutions.

I recall that in the early days of anti-virus when McAfee was accused of unscrupulous tactics, creating viruses to sell their products. I suppose in today's market these claims are just as valid except they're not being mention because all the analysts, media outlets and whomever are making money from the hype.
Reply to this comment
IMO: IM is insecure
by wbenton March 25, 2007 4:46 AM PDT
IM Stands for Insecure Messaging... (* GRIN *) even though the politically correct word is Instant Messaging! (* Double GRIN *)

Nuff said.

This time it was Skype, next time it will be Yahoo or Google or some other chat software.

Until security is built into IM... these exploits will contine.

Walt
Reply to this comment
Skype is free
by electronino March 25, 2007 2:12 PM PDT
Skype ( http://www.highspeedsat.com/skype.htm ) is the famous free downloadable client program (versions available for Windows, MacOS X, Linux, and Pocket PC) from Skype Technologies Limite (www.skype.com) that lets you do free voice sessions ("tlephone calls") with other Skype users ... and , for modes perminute fees, makes calls to PSTN phone number ("Skype-Out") and /or let PSTN users call you, on a
PSTN phone number ("SkypeIn"). Other features availabe-some ofr modest fees-inlude voice mail/messaging, call forwarding, conferencing calling, chat, file transfer, and video.
Reply to this comment
Even thought this is a good heads up...
by Anysia March 28, 2007 9:07 PM PDT
With all the alerts and warnings out there, if people by now don't know to not click on an exe file from an unknown source, regardless if it shows up in an email or via an instant messagem, that is beyond sad.
Reply to this comment
Powered by Jive Software
advertisement
RSS Feeds
Add headlines from CNET News.com to your homepage or feedreader.
Google
Yahoo
MSN
More feeds available in our RSS feed index.
Today's Top Stories
Reviewers find 3G fast and pretty but hungry
DreamWorks exec on why it bumped AMD for Intel
Hans Reiser likely to get reduced sentence
Steady growth for Twitter, despite hiccups
T. Boone Pickens: A man with an energy plan
Most Popular Stories
Photos: Top 10 newly discovered species
T-Mobile rumored to be readying Android phone for 3G launch
3G iPhone up for grabs online--or is it?
Formula One design vet creating eco-smart city car
Geeks get a word in with Merriam-Webster
Resource center from News.com sponsors
Same great protection. Reengineered for speed.
Norton Internet Security™2008

Click Here!
Norton still delivers award-winning protection and now uses 83% less memory and scans 48% faster than the competitor average. Get a FREE trial today!

Click Here!
Norton Beats the Competition

See how Norton Internet Security™2008 uses less memory, while scanning and booting faster than the competitor average.

Norton Protection Blog

Read the latest from our security experts as they help protect people from evolving online threats.

Protect Your Bluetooth Connection

Don't let fraudsters sink their teeth into your Bluetooth connection.

Vishing - What you need to know

Meet the latest ID theft scam: Voice Phishing.

Take Norton for a Test Drive Today!

Act now to get your FREE trial of Norton Internet Security 2008.

Markets

Market news, charts, SEC filings, and more

Related quotes

Dow Jones Industrials (1.36%) 152.25 11,384.21
S&P 500 (1.71%) 21.39 1,273.70
NASDAQ (2.28%) 51.12 2,294.44
CNET TECH (0.97%) 15.41 1,604.34
  Symbol Lookup



advertisement
On MovieTome: SEX AND THE CITY clips are here!
Advanced
search
Advanced
search
Visit other CBS Interactive sites