Skype spamming tool offered for peanuts
Posted on 02.08.2012
It's any wonder that a lot of individuals who want to earn a quick buck turn to setting up online scams when the tools to do it are widely available and cheap, and the likelihood of getting caught is very small?

Take the Skype Flooder as an example.

This Skype spamming tool is in its second iteration. It can be bought on underground forums for a mere $10 and, as a bonus, the buyer also receives 5000 already harvested Skype user names.

According to the ad, the flooder allows users to add, search and spam contacts, to harvest Skype user names based a particular country or gender, as well as display information such as city, username and online status. This newest version is also capable of parsing log files.

But there is also good news.

"Since the tool is only capable of spreading a particular message to those who give authorization to the spammerís account, as well as the fact that it doesnít support multiple spam accounts and proxies, it doesnít represent a scalable threat. Instead, it primarily relies on social engineering," Webroot points out.

"Although the tool is capable of segmenting the targeted population for better conversion rate, the user still has to authorize the spammer in order to receive messages from him."

Luckily for Skype users, they can easily protect themselves from random spammers by tweaking their privacy settings and making it impossible to receive calls, videos, screens and IMs from anyone who's not in their Contact list.

They just must then be careful not to add spammy users (accounts) to that list.


Chrome extension thwarts user profiling based on typing behavior

Infosec consultant Paul Moore came up with a working solution to thwart a type of behavioral profiling. The result is a Chrome extension called Keyboard Privacy, which prevents profiling of users by the way they type by randomizing the rate at which characters reach the DOM.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.

Wed, Jul 29th