Wednesday, 9 August 2006

SurfControl Detects Malicious Application on Fake Skype Web Site

Internet security provider SurfControl is currently tracking a new spyware threat that comes to users via an email written in Turkish and claiming to be from Skype. The body of the email encourages users to download the Skype application by clicking on an enclosed link. Upon clicking the link, users are taken to a site that appears to be the Turkish version of the Skype Web site to download the application.

SurfControl said the fake Skype Web site contains a malicious file, skypekur.exe, which when executed, installs multiple password recovery tools that extract passwords from IM applications, email clients, and FTP programs on an infected user's machine. Passwords, once extracted, are then sent back to the email's originator, thus compromising users' privacy.

SurfControl has added malcode protection for this attack into databases for all products. SurfControl also advises users to update any anti-virus software.