Skype malware scam targets Turkey
The Keyser Söze of spyware
Posted in Spyware, 10th August 2006 15:18 GMT
Free whitepaper – The shortcut guide to managing certificate lifecycles
Spyware authors have crafted a new attack that poses as an invitation to Turkish people to try Skype, the popular IP telephony application. Instead of being able to download the popular VoIP application, punters responding to Turkish-language emails containing the bogus offer will be directed towards a fake site.
This bogus site contains a malicious file, skypekur.exe, posing as Skype software. If executed, the malware application installs multiple password recovery tools designed to harvest passwords from IM applications, email clients, and FTP programs on compromised machines. Passwords, once extracted, are sent to hackers for later abuse.
Malicious emails punting the bogus offer were intercepted by net security firm SurfControl earlier this week. Malware posing as Skype software is rare but not unprecedented. This attack is doubly unusual because most malware solicitations are written in English. By targeting Turkish users of Skype, ne'er do wells have developed a niche-form of social engineering attack targeting an audience that's less familiar with malware. ®
Free whitepaper – Vulnerability management buyer's checklist


The business case for application security
Reducing messaging and web security costs with managed services
Vulnerability management buyer's checklist
Extended Validation SSL Certificates
The best practices guide for application security
Feds: Hospital hacker's 'massive' DDoS averted
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive