'Wiretap Trojan' Virus Enables Skype Eavesdropping

Skype, a service which provides free Voice over Internet Protocol (VoIP) calls between users, has exploded in popularity, reportedly becoming the world's largest international call provider. Skype is generally considered to be almost impenetrable to hackers, due to its encryption software, but it's now evident that a "wiretap Trojan" virus will allow eavesdroppers to record, and listen to, the VoIP calls before they are encrypted. This has nothing to do with Skype itself, but rather with an exploitation of Microsoft's audio drivers, which the Peskyspy Trojan horse actually infects, making all programs that use audio vulnerable. For more information on the vulnerability, check out Symantec's full alert here, as well as Skype's security blog, which explains the threat pretty clearly.
According to the Associated Press, Ruben Unteregger, a Swedish programmer, has been developing the virus since 2006 because he said he wants people to know that "we are now becoming a surveillance society." Kevin Haley, director of Symantec Security Response, said there is no need for hysteria or paranoia, though, because "It's not practical for any type of broad-based attacks."
Since Skype has almost 500 million users, and attracts over 300,000 more a day, it's almost inconceivable that someone could weed through all the meaningless chit-chat and intercept something incriminating or compromising. While China and Germany already are, or are thinking about, monitoring people's Skype activity, the invasion of privacy would, hopefully, still be illegal in the States. So, while Big Brother may immediately come to mind, your private conversations will most likely remain private, at least, for a little while. [From: AP/USA Today and Skype Security Blog and Symantec Security Response]




