the gaffer
10-22-2005, 01:37 AM
Security experts have warned of a newly discovered mutant version of the IRCbot (aka Fanbot) Trojan, which is being distributed via email disguised as the latest release of the popular Skype VoIP software client, vnunet.com reports.
MessageLabs said that it has intercepted more than 800 copies of the mutant Trojan, which purports to be version 1.4 of Skype's client software released last week.
When executed the malware displays a fake 'installation error' box while installing itself as '%sysdir%\remote.exe', altering the registry and shutting down shared access and Windows update services.
"This latest 'spear' phishing attack, where Skype users are being targeted with an email that appears to come from Skype, is the first case we've seen that specifically mentions Skype," said a MessageLabs spokesperson.
MessageLabs said that it has intercepted more than 800 copies of the mutant Trojan, which purports to be version 1.4 of Skype's client software released last week.
When executed the malware displays a fake 'installation error' box while installing itself as '%sysdir%\remote.exe', altering the registry and shutting down shared access and Windows update services.
"This latest 'spear' phishing attack, where Skype users are being targeted with an email that appears to come from Skype, is the first case we've seen that specifically mentions Skype," said a MessageLabs spokesperson.