THE NEW VERSION OF SKYPE DOWNLOAD
The malware relies on a network of infected Web sites to perform drive-by download attacks as the initial infection vector, and once it is resident on a new machine and finds the Skype application, it then sends malicious links to the victim’s contacts through the chat function. An analysis by researchers at CSIS in Denmark shows that the newest version of the malware includes a plugin named “msg.gsm” that uses the chat function in Skype in order to spread to new machines. The newest addition to Shylock’s arsenal is its ability to spread via Skype instant messages. That method is one that malware analysts and researchers use to analyze the behavior of malware. One recent change in the Shylock malware’s capabilities was the addition of a feature that can detect whether the malware is being installed on a remote machine via the RDP protocol.
The malware, like other Trojan bankers of its ilk, is designed specifically to steal credentials for online banking sites, and also has the ability to perform code-injection attacks. Shylock has been known publicly for more than a year and researchers have watched it morph and adapt its tactics in the last few months. The new version of Shylock has a number of new capabilities, but its goal is the same: stealing sensitive financial data from infected machines. and is playing off the fact that Microsoft is about to kill its Messenger application in favor of Skype.
The new version is spreading mainly in the U.K., Europe and the U.S. There is a new version of the Shylock malware that is now capable of spreading through Skype.
0 kommentar(er)
