Welcome to WebmasterWorld Guest from 54.146.194.42

Forum Moderators: phranque

Message Too Old, No Replies

Next-Generation Skype Trojan Hits Web

     
6:21 pm on Mar 26, 2007 (gmt 0)

Administrator from GB 

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month Best Post Of The Month

joined:May 9, 2000
posts:22287
votes: 236



Miscreants have again adapted the Warezov Trojan horse to target Skype users, Websense Security Labs warned on Thursday.

The attack is similar to threats that target instant-messaging applications. A targeted Skype user will receive a chat message with the text "Check up this" and a link to a malicious executable called file_01.exe on a website, Websense said in an alert. If the user runs the file, several other files are downloaded and run, it said.

Once infected, a computer will be at the beck and call of the attacker and the Trojan horse will start sending messages to the victim's Skype contacts to propagate, Websense said. The attack is similar to one reported in February but it has been adapted with files hosted at different locations and a new version of the malicious code, the security company said.

Next-Generation Skype Trojan Hits Web [software.silicon.com]

6:25 pm on Mar 26, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Feb 27, 2001
posts:2547
votes: 0



"Check up this"

It's a good thing that many of these trojan programmers are not native english speakers. "Check up this" is easier to identify as spam as "Hey man, I just saw this crazy thing, check it out!" ... or something that one teenage guy might type to another.
7:23 pm on Mar 26, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member trillianjedi is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Apr 15, 2003
posts:7242
votes: 0


That's part of the normal operation of the Skype API.

Install third party plug-ins at your own risk.

9:15 pm on Mar 26, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Mar 30, 2004
posts:1148
votes: 0


Why "next generation"?
10:37 pm on Mar 26, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 10, 2001
posts:731
votes: 0


"Next generation" as in, "I really could not come up with my own code, so I just modified this a bit. And my code really doesn't do anything, just grabs the address book and sends an IM with the link to the executable."

Depressing. :( Even the dark side is slacking off in serious inventive programming.

9:24 am on Mar 27, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Feb 13, 2005
posts:1077
votes: 0


I am not a miscreant!
12:38 pm on Mar 27, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Aug 1, 2003
posts:815
votes: 0


"Check up this" is easier to identify as spam

For native English speakers, yes. But for young Europeans chatting across national borders, Broken English is the language of choice.

8:05 pm on Mar 27, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:June 9, 2003
posts:1908
votes: 0


Next generation they say - and here I was, thinking attacks like this came along about a week after IM itself! ;)
10:09 pm on Mar 28, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Feb 27, 2001
posts:2547
votes: 0


Good point timster. No offense intended on my part by the way.
5:42 pm on Mar 29, 2007 (gmt 0)

New User

5+ Year Member

joined:Feb 16, 2007
posts:27
votes: 0


Users have to careful about this.

Well it is a general knowledge that we should never ever clik on a link or download anything unknown