Slashdot Mirror


Skype Trojan Can Log VoIP Conversations

Slatterz writes "Security giant Symantec claims to have found the public release of source code for a Trojan that targets Skype users. Trojan.Peskyspy is spyware which records a voice call and stores it as an MP3 file for later transmission. An infected machine will use the software that handles audio processing within a computer and save the call data as an MP3. The file is then sent over the internet to a predefined server where the attacker can listen to the recorded conversations."

10 of 151 comments (clear)

  1. Re:Platforms... by Anonymous Coward · · Score: 5, Funny
  2. Sounds familiar... by piemonkey · · Score: 5, Informative
    1. Re:Sounds familiar... by Zen+Hash · · Score: 5, Informative

      I wonder if they're talking about this trojan http://it.slashdot.org/story/09/08/26/144249/Coder-of-Swiss-Wiretapping-Trojan-Speaks-Out

      Yep. Apparently some news site picked it up a week later and wrote their own article without the original details, making it front page news all over again. The only thing new is that Symantec gave it a goofy name.

      --
      Here I sit, all broken hearted.
      Came to poop, but only farted.
  3. Source Code Available Here by AgentOJ · · Score: 5, Informative

    It appears that a guy named Ruben Unteregger published the source code on his site at http://www.megapanzer.com/source-code/#skypetrojan

    According to his site, he removed a plugin system from the source as well as code to bypass firewalls, but he'll add it back in at a later date.

    From looking at the source, this is heavily geared toward Windows, so the current iteration of the source doesn't affect OS X at this time.

  4. source by Zen+Hash · · Score: 5, Informative

    Does this affect the Mac OS X version, or does at least one of the callers have to be on a PC?

    It's written for Windows, like usual, and at least one of the callers would have to be infected.

    Source: http://www.megapanzer.com/2009/08/25/skype-trojan-sourcecode-available-for-download/

    --
    Here I sit, all broken hearted.
    Came to poop, but only farted.
  5. Attn: Sir by Anonymous Coward · · Score: 5, Funny

    Honoured friend,

    Forgive me this unusal contact, but the circumstanes of perfection are such.

    My name is Ringotha Dingo. I am an administrator at the European/African Internet Facility.

    Through my work, and the unfortunate death of my colleage, I have available to me many unused and unencrypted, cross platform Moderator points. I would be most eager to benefit you with them; however, due to a revolution in my country I am unable to access my computer network. This can be arranged by my agent in London. Please contact him directly, and reference the small agreement that you might benefit me with so that I might flee my country with my wife and two children.

    I am awaiting your abrupt reply. And will immediately have you sent an bankers draft by email if you will provide me with such.

    All my good fortunes to you!

    Ringotha Dingo
    Adminsistrator African Europeein Internets
    Toob Farm, Sweatn Bongos
    Gontoofar Way

  6. Re:I'm safe by ksatyr · · Score: 5, Funny

    That would be LAME.

  7. Symantec should read by zcold · · Score: 5, Informative

    Slashdot... Didnt the person who created this release this open source before the weekend?? Symantec is a little slow on the ball... http://it.slashdot.org/story/09/08/26/144249/Coder-of-Swiss-Wiretapping-Trojan-Speaks-Out

    --
    you know you can fry stuff putting things into things that dont like the things you put into it...
  8. RIAA to the rescue... by marciot · · Score: 5, Funny

    I'm gonna call myself and play all my CDs through Skype. That way the RIAA will unleash their pack of lawyers on the scammer who illegally downloads all those songs as MP3s off my computer.

  9. I've tried Symantec products by symbolset · · Score: 5, Funny

    I've tried Symantec products. This could not be true.

    If they wrote a virus it would have a 500MB install and you'ld have to click the EULA four times. It would take 90% of CPU and 90% of RAM while doing nothing and require 100% of everything for a couple of hours to update before it could do something. The updater would break and you'ld have to reinstall Windows, then the update prep package, and then the virus to get it to activate at all. And when it was finally working, it would break before connecting to its control server.

    If you wanted a virus that bad, you might as well install Windows 98. At least the user interface would be similar to Symantec.

    --
    Help stamp out iliturcy.