Skype Vulnerability, Now Blocked, Allowed Account Hijack - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Infrastructure // PC & Servers
News
11/14/2012
10:46 AM
Connect Directly
Twitter
Facebook
LinkedIn
RSS
E-Mail
50%
50%

Skype Vulnerability, Now Blocked, Allowed Account Hijack

A security vulnerability in Skype, in use for 2 months, allowed an attacker to hijack a Skype account if they knew the email address of the user. Skype has temporarily disabled the feature which allowed the attack.

Security blogs everywhere are reporting on a Skype vulnerability which allowed easy hijacking of an account if the attacker knew the email address of a user.

Skype temporarily disabled password resetting this morning, the feature which allowed the hijack. We advise you to log in to your account to make sure it has not been hijacked and to check your history.

Image courtesy of Kaspersky

The problem was first publicized last night on Russian web forums. Skype now claims to have fixed the password reset so that it cannot be abused in this way.

Skype issued a statement on the issue:

Early this morning we were notified of user concerns surrounding the security of the password reset feature on our website. This issue affected some users where multiple Skype accounts were registered to the same email address. We suspended the password reset feature temporarily this morning as a precaution and have made updates to the password reset process today so that it is now working properly. We are reaching out to a small number of users who may have been impacted to assist as necessary. Skype is committed to providing a safe and secure communications experience to our users and we apologize for the inconvenience.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
News
Top 10 Data and Analytics Trends for 2021
Jessica Davis, Senior Editor, Enterprise Apps,  11/13/2020
Commentary
Where Cloud Spending Might Grow in 2021 and Post-Pandemic
Joao-Pierre S. Ruth, Senior Writer,  11/19/2020
Slideshows
The Ever-Expanding List of C-Level Technology Positions
Cynthia Harvey, Freelance Journalist, InformationWeek,  11/10/2020
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
Why Chatbots Are So Popular Right Now
In this IT Trend Report, you will learn more about why chatbots are gaining traction within businesses, particularly while a pandemic is impacting the world.
Slideshows
Flash Poll