[AfrICANN-discuss] Skype Warns Users of P-to-P Worm

Tue Sep 11 13:19:36 SAST 2007

 Skype Warns Users of P-to-P Worm

Jeremy Kirk, IDG News Service*Mon Sep 10, 10:00 AM ET*

Skype users are under attack from a new worm that spreads through the
peer-to-peer Internet phone application's chat feature.

The attack begins when a user receives an instant message containing a link
from someone in their contact list or an unknown Skype user, said Villu
Arak, a Skype spokesman based in Tallinn, Estonia.

There are several versions of the chat messages, which are "cleverly
written" to fool users, Arak wrote on the Skype heartbeat blog. The link
appears to contain a JPEG photo file, but if clicked causes the Windows
run/save dialog box to appear, which asks whether the user wants to save or
run a ".scr" file.

The file is malicious software that can then access a user's PC via Skype's
API (application programming interface). The malicious file has been named
W32/Ramex.A.

"Users whose computers are infected with this virus will send a chat message
to other Skype users asking them to click on a web link that can infect"
their computers, Arak wrote.

To avoid trouble, users should not download the file. At least two security
vendors, F-Secure Corp. and Kaspersky Lab Ltd., have updated their software
to detect the worm, Arak wrote.

Instant message programs are another way hackers can try to gain control
over PCs. Access to one person's instant messenger or e-mail account can
mean contact details for many others, allowing hackers to use malicious
e-mails or instant messages to lure victims into downloading malicious
software.

Copyright (c) 2007 PC World Communications,
Inc<http://us.rd.yahoo.com/dailynews/pcworld/SIG=j7jdjb;_ylt=An6sss6MgXTTe1c3VpHTx_QRSLMF/*http://www.pcworld.com/>.

 Copyright (c) 2007 Yahoo! Inc. All rights reserved.
Questions or Comments<http://us.ard.yahoo.com/SIG=12fcfeeo9/M=224039.1983420.3465435.1919853/D=news/S=95635473:FOOT/_ylt=AmGLnVWyOMBFF0f1Peoqh2ARSLMF/Y=YAHOO/EXP=1189516733/A=1030392/R=1/SIG=1124ddvo1/*http://help.yahoo.com/help/news/>
Privacy Policy<http://us.ard.yahoo.com/SIG=12fcfeeo9/M=224039.1983420.3465435.1919853/D=news/S=95635473:FOOT/_ylt=AmGLnVWyOMBFF0f1Peoqh2ARSLMF/Y=YAHOO/EXP=1189516733/A=1030392/R=2/SIG=11a1ak88p/*http://privacy.yahoo.com/privacy/us/news>-Terms
of Service<http://us.ard.yahoo.com/SIG=12fcfeeo9/M=224039.1983420.3465435.1919853/D=news/S=95635473:FOOT/_ylt=AmGLnVWyOMBFF0f1Peoqh2ARSLMF/Y=YAHOO/EXP=1189516733/A=1030392/R=3/SIG=1136qnvkg/*http://docs.yahoo.com/info/terms/>-
Copyright/IP
Policy<http://us.ard.yahoo.com/SIG=12fcfeeo9/M=224039.1983420.3465435.1919853/D=news/S=95635473:FOOT/_ylt=AmGLnVWyOMBFF0f1Peoqh2ARSLMF/Y=YAHOO/EXP=1189516733/A=1030392/R=4/SIG=11lp7krrc/*http://docs.yahoo.com/info/copyright/copyright.html>-
Ad
Feedback <javascript:ADFlaunch()>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/africann/attachments/20070911/598388eb/attachment.htm