Skype Worm on the Loose

A new worm is sending convincing fake Skype Instant Messenger chats in an attempt to infect victims, the company warned today.

Villu Arak's blog post from earlier today said the worm affects users of Skype for Windows, and that the company has been in touch with antivirus vendors to stop the worm's spread. Arak also describes manual steps for removing the worm.

According to additional analysis from the SpywareGuide Greynets blog, the worm sends chat messages that attempt to trick victims into thinking they were accidentally sent a file with messages such as "look what crazy photo Tiffany sent to me,looks cool" and "oops sorry please don't look there :S."

The displayed link attempts to download a file ending with a .scr extention, used for screen savers. If double-clicked, the malware - known variously as Skipi, Pykspa and Ramex - will first attempt to disable securty software, and then install another, data-stealing piece of malware, according to research from Symantec.

According to Symantec, a successful infection changes the Windows host file to block access to a large variety of security-oriented sites, including symantec.com, mcafee.com and sophos.com. So if you can browse those sites from your PC, you're most likely not infected with this particular worm.

Comments

Post a comment Post a comment

0 / 1000 max characters