Subscribe

IM is lucrative for hackers

Staff Writer
By Staff Writer, ITWeb
Johannesburg, 28 May 2008

A Kaspersky Lab article shows the danger of widespread attacks on instant messaging (IM) applications.

The article by Kaspersky analysts Denis Maslennikov and Boris Yampolsky called 'Instant Threats', explains that newer versions of IM clients have unidentified vulnerabilities, that can easily be exploited by hackers before receiving program developer attention.

The article uses ICQ, a popular IM client worldwide, to illustrate different types of attacks that can affect IM user.

ICQ is used to spread IM worms that use the client as a base for self-replicating, Trojan programs for stealing passwords, and malicious programs created to fraudulently obtain money from users.

Cyber criminals also use social engineering principles to get unsuspecting victims to click on a malicious link.

It is often the case that the exploits are present in the IM client itself. These vulnerabilities can lead to buffer overflow or even allow for remote access without the consent of the owner.

Maslennikov and Yampolsky are urging IM users to practise the rules of "computer hygiene" and to use common sense when accessing IM, as there are no methods or solutions designed to specifically protect IM clients.

Related stories:
Malware menaces mobiles
Text messaging tracks teen
Malware 2.0 is here

Share