Incidents

New Skype Vulnerability Allows Hijacking of Accounts

Last night, reports have appeared on several Russian forums regarding a Skype account hijacking exploit. The information has been made available on several Russian blogs and is now actively exploited in the wild.

The exploit, which has been available for two months already, takes advantage of the Skype password reset feature. This allows you to reset the password of somebody else’s account, as long as you know the e-mail address associated with their main Skype account.

To protect yourself against this exploit, we recommend changing the e-mail address associated with the Skype account to a new, never-before-used address. This should prevent hackers from guessing your e-mail associated with Skype and hijacking it.

Update [14-Nov-2012 10:19am UTC]: the “feature” which allows this bug to work has been temporarily disabled by Microsoft. You can read the Microsoft statement [here].

New Skype Vulnerability Allows Hijacking of Accounts

Your email address will not be published.

 

Reports

Andariel deploys DTrack and Maui ransomware

Earlier, the CISA published an alert related to a Stairwell report, “Maui Ransomware.” Our data should openly help solidify the attribution of the Maui ransomware incident to the Korean-speaking APT Andariel, also known as Silent Chollima and Stonefly.

APT trends report Q2 2022

This is our latest summary of advanced persistent threat (APT) activity, focusing on events that we observed during Q2 2022.

Subscribe to our weekly e-mails

The hottest research right in your inbox