Skype spyware spam scam slammed

Users were today warned of a new phishing scam that is being distributed via spam emails purporting to come from Skype.

SurfControl said that it first detected the spyware attack, which is being sent in emails written in Turkish and claiming to be from Skype, late yesterday (August 8).

The body of the emails encourage users to download what is claimed to be the Skype application by clicking on an enclosed link. Upon clicking the link, unwitting users are taken to a site that appears to be the Turkish version of the Skype website to download the application.

The fake Skype website contains a malicious file, skypekur.exe, which when executed, installs multiple password recovery tools that extract passwords from IM applications, email clients, and FTP programs on an infected user’s machine. Passwords, once extracted, are then sent back to the email’s originator, SurfControl warned.