You are here: silicon.com > Software > Malware

Malware

Skype threat confusion clears

Skype Chat not vulnerable after all

Tags: websense, security, skype, trojan horse

By Dawn Kawamoto

Published: 21 December 2006 10:00 GMT

Confusion over a security threat hitting the popular VoIP service Skype was resolved on Tuesday, with researchers re-characterising the threat as a Trojan horse rather than a worm.

Earlier this week, security firm Websense issued an advisory that a worm was using Skype Chat - the net telephone provider's instant-messaging tool - to self-propagate. The security warning advised users to be wary of instant messages that asked for users to download and run a file, sp.exe.

But shortly after the advisory went out, confusion began to emerge as to whether the security issue was in fact a worm. Other security firms chimed in, questioning whether a worm was on the loose.

Websense later revised its security alert on Tuesday, re-characterising the threat as a Trojan horse.

"After discussions with the very helpful Skype security team, the behaviour of this Trojan using the Skype API (application programming interface) is as per the specifications of the API," Websense stated in its revised advisory. "The end user who is running Skype does get notified that a program is attempting to access it and must acknowledge it... there is no vulnerability in Skype at this time that has been uncovered."

Dawn Kawamoto writes for CNET News.com.

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Support Engineer

CCNA (voice) skill set2) Windows Networking Administration and troubleshooting (Domains, Active Directory, DNS, DHCP, Windows 2003 Server, etc), MCSE ...

Defect Manager - Test Specialist, Derivatives, Banking

Ensuring defect status, progress of being resolved, comparison between phases, cycles or releases, or general information can be reported API ...

Systems Administrator/ Engineer (MS, Exchange, VMware, Cisco)

If you are interested in applying for this position please send your CV for an immediate review or call Sarah-Jane Knight at ComputerWorld Personnel ...

Agenda Setters 2008
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: