Yet another NEW worm is targeting Skype and will harvest e-mail addresses and directing users to a range of sites hosting other malicious software.

I just read this on network world. "Once a machine is infected, the worm sends a malicious link via instant messages to other users in person's Skype contact list, according to F-Secure's blog." More on on network world.

F-Secure calls the worm "IM-Worm:W32/Pykse.A" and Sophos named it "Mal/Pykse-A"

I have a little unhappy grin on my face when I read all those "skype for business" marketing hype. I would especially be carefull when integrating Skype with any CRM system. I also think it is not a good idea to just link Skype via applications like Skylook to MS Outlook. Of course as usual, these type of issues will be downsized by Skype's PR. No wonder with such a permissible way of linking public Skype ID's to email-addresses. Combine that with the dual login without notification problem and the public password reset procedure and you have a very volatile mix. I might hope that the Skype for Enterprise version is build on different foundations and principles.

IM-Worm:W32/Pykse.A spreads via Skype by sending a message with a malware link to all online friends in Skype' contact list using Skype API. The message is randomly chosen from the the list on the image left here.

 

Latest news via Google.
Related : http://www.pcadvisor.co.uk/news/index.cfm?newsid=9013

F-secure blog : http://www.f-secure.com/weblog/archives/archive-042007.html#00001169

Comments

[Chaim Haas]

The following is a statement from Kurt Sauer, Skype's Chief Security Officer:

"Harmful viruses and Trojan horses may damage a user's computer and collect private data, regardless of whether a person is using Skype, email or other IM clients. Skype strongly recommends that users take extra caution in general when asked to open attachments or links from unknown people, or suspicious-looking attachments even from people you know. In addition, it's always recommended to use an anti-virus programs from Symantec or other providers to check the files received from other people."