NEWS FROM THE LAB - Wednesday, October 17, 2007

Skype Stealer Posted by Sean @ 11:53 GMT

Yesterday we added detection for a Trojan-Spy password stealer targeting Skype. The malware bills itself as Skype Defender, which sounds like a security plug-in.

Running the malware produces this dialog:

Skype Defender Installation

Once "installed", what looks like the Skype logon screen is displayed:

Skype Defender SignIn

Attempting to use the logon screen produces an error message:

Skype Defender Error

Note that the real Skype's sign in button is different than the malware's:

Skype Logon

Our detection is Trojan-Spy.Win32.Skyper.B.

Read more details from Skype's Blog.