High Desert Daily
(Victor Valley) – Yet another good reason to keep your computer updated and secure, and NEVER click on links you are not familiar with: multiple security firms are reporting that an instant message being sent to Skype users contains a malicious “worm” called Dorkbot. This particular worm has hit Twitter and Facebook users in the past, and is now doing damage on Skype.
According to security firm Trend Micro’s blog, the instant message that is sent to users from someone that they know reads, “lol is this your new profile pic?” with a link. Once users click on the link, they are asked to download a file that, once opened, installs the worm on their computer.
Trend Micro’s blog reports that “On installation, this worm may initiate large scale click-fraud activity on each compromised machine, recruiting it into a botnet. The Dorkbot worm will also steal user name and password credentials for a vast array of websites including Facebook, Twitter, Google, PayPal, NetFlix and many others.”
The blog goes on to say, “Some infections will lock the user out of their machine, informing them that their files have been encrypted and that they will be subsequently deleted unless the unfortunate victim surrenders a $200 fine within 48 hours.”
Posts in the Skype community support network are reporting that the malware takes advantage of Skype’s programming interface in order to automatically blast the malicious link to all of the compromised accounts’ contacts.
The security firms are still investigating this latest emergence of the Dorkbot worm, but they say that the infection is not yet widespread.
Skype said in a statement: “Skype takes the user experience very seriously, particularly when it comes to security. We are aware of this malicious activity and are working quickly to mitigate its impact.
“We strongly recommend upgrading to the newest Skype version and applying updated security features on your computer.
“Additionally, following links – even when from your contacts – that look strange or are unexpected is not advisable.”