FYI…

- http://preview.tinyurl.com/2rxryl
September 10, 2007 - Computerworld - "Skype users are under attack from a new worm that spreads through the peer-to-peer Internet phone application's chat feature. The attack begins when a user receives an instant message containing a link from someone in their contact list -or- an unknown Skype user… There are several versions of the chat messages, which are "cleverly written" to fool users, Arak wrote on the Skype heartbeat blog. The link appears to contain a JPEG photo file, but if clicked causes the Windows run/save dialog box to appear, which asks whether the user wants to save or run a ".scr" file. The file is malicious software that can then access a user's PC via Skype's API (application programming interface). The malicious file has been named W32/Ramex.A… Instant message programs are another way hackers can try to gain control over PCs. Access to one person's instant messenger or e-mail account can mean contact details for many others, allowing hackers to use malicious e-mails or instant messages to lure victims into downloading malicious software."

> http://heartbeat.skype.com/2007/09/the_wor…s_skype_fo.html

Seeing bubbles? Might be the Skype worm…
- http://www.f-secure.com/weblog/archives/ar…7.html#00001274
September 10, 2007 - "…Although the links look like they are pointing to an image, they are not. Instead, they point to a page that will try to download a program called DSC027.SCR to your machine. We've seen at least two different versions of this malware so far. When run, they both display one of the default built-in wallpapers in Windows (Soap Bubbles.bmp)…"

(Screenshot available at the F-secure URL above.)

.