Warezov-infected link sent through the chat client

Feb 28, 2007 08:42 GMT  ·  By

As you surely know, Skype is the most popular and powerful peer-to-peer Internet telephony network, currently owned by eBay, being acquired in October 2005. Because it is used by an impressive number of users, it seems like Skype tends to become one of the ways for malware distributions as F-Secure reported. The security company identified numerous malicious links spreading on the messaging client that contain infected files that can be easily installed on vulnerable computers.

"We have two reports of people receiving links to a Warezov-infected file via Skype. Now, some older Warezov variants have used other Instant Messaging client in a similar fashion, but not Skype. We detect the binary at that download location as Warezov.ly," F-Secure reported.

It seems like the only solution to avoid these infections is to refuse to open malicious links and also to close untrusted messages sent by unknown contacts on Skype.

In addition, F-Secure published one more security advisory to report a security flaw on MySpace, a new infection that can make a vulnerable computer susceptible to several kinds of attacks. It seems like some of the profiles published on the main page of the service contain weblinks to an infected file entitled MS Viewer meant to help users view the published adult content.

"There's something new spreading on MySpace. It ends up modifying existing profiles, overlaying the content with a message like this: This profile contains adult content. CLICK HERE to install MS Viewer. If you follow the link, you'll end up with a download. This is a Zlob variant. We haven't finished our analysis on this, but apparently when run it tries to modify your MySpace page to include a code snippet that is responsible for the malicious download link," the security company sustained in the advisory.