Hot on HuffPost Tech:

See More Stories
AOL Tech

'Wiretap Trojan' Virus Enables Skype Eavesdropping


Skype, a service which provides free Voice over Internet Protocol (VoIP) calls between users, has exploded in popularity, reportedly becoming the world's largest international call provider. Skype is generally considered to be almost impenetrable to hackers, due to its encryption software, but it's now evident that a "wiretap Trojan" virus will allow eavesdroppers to record, and listen to, the VoIP calls before they are encrypted. This has nothing to do with Skype itself, but rather with an exploitation of Microsoft's audio drivers, which the Peskyspy Trojan horse actually infects, making all programs that use audio vulnerable. For more information on the vulnerability, check out Symantec's full alert here, as well as Skype's security blog, which explains the threat pretty clearly.


According to the Associated Press, Ruben Unteregger, a Swedish programmer, has been developing the virus since 2006 because he said he wants people to know that "we are now becoming a surveillance society." Kevin Haley, director of Symantec Security Response, said there is no need for hysteria or paranoia, though, because "It's not practical for any type of broad-based attacks."

Since Skype has almost 500 million users, and attracts over 300,000 more a day, it's almost inconceivable that someone could weed through all the meaningless chit-chat and intercept something incriminating or compromising. While China and Germany already are, or are thinking about, monitoring people's Skype activity, the invasion of privacy would, hopefully, still be illegal in the States. So, while Big Brother may immediately come to mind, your private conversations will most likely remain private, at least, for a little while. [From: AP/USA Today and Skype Security Blog and Symantec Security Response]


Tags: privacy, security, Skype, top, voice over ip, VoiceOverIp, voip, wiretap trojan, wiretapping, WiretapTrojan

Comments

7

Add your comments

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.