Malware, Trojans Posing As Skype Password Change Notification

Have you received a suspicious email from Skype?

Email spam by cyber criminals posing as Skype stating that you have changed your password have been infecting computer systems with the Troj/Backdr-HN Trojan.

A file (Skype_Password_insctructions.zip) is attached to the email, and if you unzip and execute its contents (Skype_Password_inscructions.pdf.exe), you run the risk of infecting your Windows computer with the Troj/Backdr-HN Trojan. The malciious file is using the well-known “double extension trick” to cleverly dupe the unwary into believing that they might be clicking on a PDF rather than executable code (exe).

This infection is capable of taking complete control of a computer system, including remaining silent whilst using key-loggers to retain personal information such as credit card numbers, passwords, and more. The malware also opens a backdoor onto your computer, giving remote access to third party cyber criminals.

Spam Email Details

Subject: Password successfully changed

Your new Skype password has been set.

You can now view your attached call history and inscturtions how to change your account settings.
If the changes described above are accurate, no further action is needed. If anything doesn’t look right, follow the link below to make changes: Restore password
Talk soon,
The people at Skype

Surprisingly, the links really do point to the genuine Skype website, Skype.com.

As always, be on the lookout for unsolicited suspicious emails and always be wary of opening attachments which arrive out of the blue.

If you receive a message from Skype stating your password has changed, do not open it, delete it right away.