Looks like the Yahoo IM worm now comes in a newer version and will also affect Skype users, so you might want to be more careful and wary when using either IM program from now on. For the Yahoo version, this worm will install backdoors on Windows systems via Yahoo Instant Messenger, while the newer Skpe-enabled (if we can call it that) version is more sophisticated in its social engineering and payload. The malware will come in the form of an instant message through Yahoo or Skype, where you should set your alert flags whenever one of these messages including “Does my new hair style look good? bad? perfect?” or “My printer is about to be thrown through a window if this pic won’t come out right. You see anything wrong with it?” pop up, complete with a link to a Web page that looks as though it leads you to an image file. When the link is clicked, it will show an interface which resembles the RapidShare Web hosting site with a ZIP file for download. Click on it and your computer will be infected once the malware is downloaded and installed. It has been detected as “W32.Skyhoo.Worm”, and will disappear if your computer does not have Skype or Yahoo Messenger installed.
Filed in ..