13/10/2012
If you're a Skype user, the virus writers have had a busy week trying to trick you into downloading their wares. There have been two scams going around, both of which can be easily avoided if you are forewarned.
The first is a malicious worm that has been spreading quickly among Skype users which can take over your computer and ask for ransom to be paid in order to let you use it again. The worm is spread through a Skype instant message which reads: “lol is this your new profile pic?” followed by a link to the supposed profile pic. When you click the link, it will download a file which opens a back door, allowing remote control of your PC by the scammer. Not only does this worm take over your PC, it also sends the link to your contact list, so all your Skype contacts will get the message as if it came from you. The malware can take over your entire PC, will demand money to be paid within 48 hours to release it, and threatens to tell the authorities that you've been downloading prohibited material unless you pay up.
The second threat arrives by email rather than instant message. The email poses as a message from Skype, claiming that you have changed your password. Here's an example of a typical email (note the clumsy spelling mistake):
----------------------------------------------
Password successfully changed
Your new Skype password has been set.
You can now view your attached call history and inscturtions how to change your account settings.
If the changes described above are accurate, no further action is needed. If anything doesn't look right, follow the link below to make changes: Restore password
Talk soon,
The people at Skype
-----------------------------------------------
Even though the links in the email really do point to the genuine Skype website at skype.com, a file Skype_Password_insctructions.zip) is attached to the email, and if you make the mistake of unzipping and executing its contents (Skype_Password_inscructions.pdf.exe) then your Windows computer will be infected. The malware opens a backdoor onto your computer, giving remote hackers access to your system.
As always, be on the lookout for unsolicited suspicious emails and always be wary of opening attachments which arrive out of the blue.
If you have any questions or concerns about these possible threats, don't hesitate to contact me.
Neil