Skype ‘Worm’ Overrated


Warnings late Monday and very early Tuesday claimed that a worm was propagating across Skype — one of the most popular voice-over-Internet protocol applications — and infecting systems with a password-stealing Trojan horse.


Click here!

This falls into the category of Insecurity companies issuing “alerts” to increase traffic at their website:

Warnings late Monday and very early Tuesday claimed that a worm was propagating across Skype — one of the most popular voice-over-Internet protocol applications — and infecting systems with a password-stealing Trojan horse. Tuesday, for example, Symantec issued an alert to customers of its DeepSight threat management service that a worm it dubbed “Chatosky” was spreading in the Asia Pacific region, including South Korea.

“The code isn’t a worm,” says Dan Hubbard, VP of research at San Diego-based security vendor Websense. “It relies on the end user to acknowledge a binary through the API, which is normal behavior in Skype.” In addition, the threat does not make copies of itself.

“This is either spreading very slowly, and only regionally — or it’s dead by now,” Hubbard says.

To acquire this Trojan, you have to download a program from a url, following instructions from a chat message. There still is no patch for “Stupid”.

Posted: Wed - December 20, 2006 at 07:07 AM