Yet another NEW worm is targeting Skype and will harvest e-mail addresses and directing users to a range of sites hosting other malicious software.

I just read this on network world. "Once a machine is infected, the worm sends a malicious link via instant messages to other users in person's Skype contact list, according to F-Secure's blog." More on on network world.

F-Secure calls the worm "IM-Worm:W32/Pykse.A" and Sophos named it "Mal/Pykse-A"

I have a little unhappy grin on my face when I read all those "skype for business" marketing hype. I would especially be carefull when integrating Skype with any CRM system. I also think it is not a good idea to just link Skype via applications like Skylook to MS Outlook. Of course as usual, these type of issues will be downsized by Skype's PR. No wonder with such a permissible way of linking public Skype ID's to email-addresses. Combine that with the dual login without notification problem and the public password reset procedure and you have a very volatile mix. I might hope that the Skype for Enterprise version is build on different foundations and principles.

IM-Worm:W32/Pykse.A spreads via Skype by sending a message with a malware link to all online friends in Skype' contact list using Skype API. The message is randomly chosen from the the list on the image left here.

 

Latest news via Google.
Related : http://www.pcadvisor.co.uk/news/index.cfm?newsid=9013

F-secure blog : http://www.f-secure.com/weblog/archives/archive-042007.html#00001169