Friday, March 30, 2007

Warezov now targets Skype users

ROGUE net users have created a new variation of Warezov/Stration malicious code that is currently spreading through the Skype network, attacking Skype users’ machines, security specialists have warned.

WebSense Security Labs issued a warning that Skype users receive a message that says “Check this up”, with a URL containing a hyperlink.

Although the code itself is not self-propagating, when it runs, a URL is sent to all users within the user's contacts list.

When users click on the link, they are redirected to a site that is hosting an .exe file that users are prompted to click. WebSense notes that there is no vulnerability within Skype itself, but if the users runs the .exe file, several other files are automatically downloaded and run.

Once the computer is infected it can be accessed by the attacker and the Trojan will start propagating by sending the rogue message to everyone in the users contact list.

Skype has warned users against opening the malicious .exe file. The company said users should be careful before opening any attachment in general.

For more Net Working, VOIP Expo and IT Security news, click below.