Malware Tricks: Skype Edition

[Deozaan]

I just got an IM on Skype from some random user trying to sound like an official service by being named Online Monitor ®:

[1:01:12 PM] Online Monitor ® says: WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================

ATTENTION ! Security Center has detected
malware on your computer !

Affected Software:

Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows NT Server 4.0
Microsoft Windows Win98
Microsoft Windows Server 2003

Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns

Recommendation: Users running vulnerable version should install a repair
utility immediately

Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.

[link removed]

I don't know how common things like this are on other IM clients (since I only use Gtalk) but I thought people should be made aware. I also took this opportunity to educate my wife about things like this to make sure she doesn't unwittingly click the link.

More info about this particular occurrence here: Skype Security Blog

Note that the link in my scam was different than the one posted on the Security Blog.

[wreckedcarzz]

Wouldn't that be amusing if you were running it under WINE or something?

"Good to know. I'm not running Windows."

That would be just absolutely hilarious for me.

[f0dder]

Skype lets non-contacts IM you? Wonderful

[wreckedcarzz]

Skype lets non-contacts IM you? Wonderful

-f0dder (October 13, 2008, 02:22 PM)

That would be a bit of a PITA getting a new contact ... you would have to meet (game, chat room, forum, etc), exchange your info, then add them to your list. If one person gets it [info] wrong, neither can re-communicate (unless they find each other again).

There should be an option to disable non-contacts IMing you before you've approved them though. Kind of like how MSN works.

[Deozaan]

Skype lets non-contacts IM you? Wonderful

-f0dder (October 13, 2008, 02:22 PM)

You can disable non-contacts from contacting you. I just haven't done that.