Worm spreading through Skype and Messenger
Worm spreading through Skype and Messenger Since Saturday, theres a worm actively spreading through (mainly) Skype as well as Messenger (Windows Messenger, Microsoft MSN Messenger). Someone whos infected with this worm will send you the following message: Message in German asking to check your cool pictures The link refers to goo.gl and is actually Googles URL Shortener service. Youll land on Hotfile.com, which is a legitimate file sharing website. (its not the first time Hotfile has been used to spread malware, read more here. The file has already been removed by Hotfile.) Links refers to Hotfile and will immediately download a ZIP file. Positive thing is that it is a ZIP file and not an EXE. This means the user still has to manually unpack and run the malware. Inside our ZIP file well find the following file, which is covered as a Skype setup file: Looks like the real deal. But its not. When executing this file, another file (a random 4 character EXE) will be dropped to the %...