The authors of the prolific Warezov worm are targeting users of Skype.

Warezov variants first cropped up in September 2006 and spread in the attachments of email messages posing as security fixes. Instead of arriving via an email attachment, the latest variant of the worm spreads using a bogus Skype chat message asking users to click on a link, which points to a hacker-controlled website hosting malicious codes.

The plausibility of the attack is increased because infected messages likely come from a target's list of known contacts, though the abrupt dialogue (http://www.nice-ventures.com/blog/archives/611-Skype-Propagating-Rootkit.html) it generates might trigger a few alarm bells.

Some older Warezov variants used other Instant Messaging clients in a similar fashion, but this variant (Warezov-LY) is the first to use Skype, anti-virus firm F-secure reports (http://www.f-secure.com/weblog/archives/archive-022007.html#00001126).

This Warezov family of worms is notable for the rate at which new variants of the malware are being produced, making detection and removal a big challenge for anti-virus vendors who've had to update anti-virus signatures rapidly as a result. ®

Related stories

Skype worm blows bubbles at victims (11 September 2007)
http://www.theregister.co.uk/2007/09/11/skype_worm/
Skype worm leaps onto MSN (24 May 2007)
http://www.theregister.co.uk/2007/05/24/skype_msn_worm/
Skype IM malware smut surfaces (16 April 2007)
http://www.theregister.co.uk/2007/04/16/skype_malware/
Skype does directory enquiries and dirty chat lines (16 March 2007)
http://www.theregister.co.uk/2007/03/16/skype_prime_find/
Imperfect Storm aids spammers (19 February 2007)
http://www.theregister.co.uk/2007/02/19/storm_worm_stockpatrol/
Anatomy sheds new light on Storm Worm (9 February 2007)
http://www.theregister.co.uk/2007/02/09/storm_worm_anatomy/
Hackers call on Skype to spread Trojan (20 December 2006)
http://www.theregister.co.uk/2006/12/20/skype_trojan/
Skype malware scam targets Turkey (10 August 2006)
http://www.theregister.co.uk/2006/08/10/skype_spyware_scam/
IM worm installs rogue browser (22 May 2006)
http://www.theregister.co.uk/2006/05/22/safety_browser_im_worm/
Say hello to the Skype Trojan (18 October 2005)
http://www.theregister.co.uk/2005/10/18/skype_trojan/
Polyglot IM worm targets MSN (25 August 2005)
http://www.theregister.co.uk/2005/08/25/kelvir_im_worm/