Fake Skype email making rounds contains trojan
Posted by: Jon Ben-Mayor on 11/29/2013 01:14 PM [ Comments ]
If you receive an email claiming to be from Skype with the subject line “You received a new message from Skype voicemail service,” do not open it.
MXLab brought the email to light on their blog. They state the email is being sent from the spoofed address of “Skype Communications” and has the following body:
This is an automated email, please don’t reply.
Voice Message Notification
You received a new message from Skype voicemail service.
Message Details:
Time of Call: Tue, 26 Nov 2013 10:20:24 -0400
Length of Call: 38sec
Listen to the message in the attached file.
Lost Password · Account Settings · Help · Terms of Use · Privacy
If You Are Still Having Problems
If you’re still having difficulty retrieving your Skype Name please contact a support agent via
https://support.skype.com/support_request
Protect Your Password
Skype staff will NEVER ask you for your password via email. The only places you are asked for your password are when you sign in to Skype or on our website if you want to buy something or check your account. You will always sign in via a secure connection, and we ask you to ensure that the address in your browser begins exactly like this https://secure.skype.com It should also show a little padlock symbol to indicate the secure connection.
Be alert to emails that request account information or urgent action. Be cautious of websites with irregular addresses or those that offer unofficial Skype downloads. Security updates and product upgrades are made available at http://www.skype.com or using the client’s upgrade function.
© 2003-2013 Skype and/or Microsoft. The Skype name, associated trademarks and logos and the “S” logo are trademarks of Skype or related entities.
Skype Communications S.a.r.l. 23-29 Rives de Clausen, L-2165 Luxembourg.
The purpose of this email is to get you to download the attached file, and according to MXLab it contains a variant of the Zeus Trojan. The fraudsters have added real links that take you back to the Skype website in order to make the notification seem more legitimate.
At the time of writing, 7 of the 46 AV engines did detect the trojan at Virus Total.
This is an automated email, please don’t reply.
Voice Message Notification
You received a new message from Skype voicemail service.
Message Details:
Time of Call: Tue, 26 Nov 2013 10:20:24 -0400
Length of Call: 38sec
Listen to the message in the attached file.
Lost Password · Account Settings · Help · Terms of Use · Privacy
If You Are Still Having Problems
If you’re still having difficulty retrieving your Skype Name please contact a support agent via
https://support.skype.com/support_request
Protect Your Password
Skype staff will NEVER ask you for your password via email. The only places you are asked for your password are when you sign in to Skype or on our website if you want to buy something or check your account. You will always sign in via a secure connection, and we ask you to ensure that the address in your browser begins exactly like this https://secure.skype.com It should also show a little padlock symbol to indicate the secure connection.
Be alert to emails that request account information or urgent action. Be cautious of websites with irregular addresses or those that offer unofficial Skype downloads. Security updates and product upgrades are made available at http://www.skype.com or using the client’s upgrade function.
© 2003-2013 Skype and/or Microsoft. The Skype name, associated trademarks and logos and the “S” logo are trademarks of Skype or related entities.
Skype Communications S.a.r.l. 23-29 Rives de Clausen, L-2165 Luxembourg.
The purpose of this email is to get you to download the attached file, and according to MXLab it contains a variant of the Zeus Trojan. The fraudsters have added real links that take you back to the Skype website in order to make the notification seem more legitimate.
At the time of writing, 7 of the 46 AV engines did detect the trojan at Virus Total.
Comments