Wednesday, September 28, 2011

Skype Releases Updated Version to Stop iPhone/iPod Touch Drive-By IM Attacks

Skype iPhone AppiPhone & iPod Touch owners that use Skype can breathe a sigh of relief.

Skype has released an updated version of their program for Apple’s iOS platform that addresses a vulnerability that can allow cybercriminals to steal user’s entire address books.

Recently it was reported that iPhone & iPod Touch users could potentially have their entire addresses book stolen in a drive-by messaging attack from a scammer.

The problem lied with the fact that the ‘Full Name’ field was not checked for malicious code in the iOS version. This left the door wide open for internet scammers to place code into the field & send a chat to an innocent Skype user. Once the IM was viewed, the attack code would execute, putting the recipient’s sensitive data at risk.

Although the fix is not officially documented in the list of included changes, a Skype spokesperson has confirmed that Skype version 3.5.84 for iOS contains a patch for the security risk.

Users can download the latest version of Skype (3.5.84) from Apple’s iTunes Store.

No comments:

Post a Comment