Now you have your ICQ account! But at the moment, you can only login with Kopete using UINs (Unified Identification Number). 8 How do I Register my ICQ phone number?.7 What do you need to know about ICQ FAQ?.Matt Scarborough contributed to this report. More generic, outbound IRC traffic,Īnd outbound scans of port 273 are always suspicious. NOT take these instructions too specific. Just a reminder: there are likely variations of this basic scheme. While scan.exe is not currentlyĭetected as a virus, it will uncompress itself and extract several components Upon joining the IRC channel, the 'bots' are currently instructed to 27374 andġ243. We do recommend blocking access to the following IPs and sites used in this Screen and replace it with its own image of a 'secure' task bar. More sophisticated impostures will move the actual task bar of the To conceal the fact that the site is not using http (the 'lock' icon moves off The url includes javascript code to maximize the window. While https can be used to make a 'fake' site look moreĪuthentic, it adds an extra layer of complexity most malware authors avoid. The URL does not use a domain name, but an IP address. One has to understand that neither service uses encryption to transmit Either instant messanger service should not be considered Microsoft will never use either service to notify users of patches. In this case, a number of hints indicate that the site is not authentic:

We do urge systemĪdministrators to educate users about commonly used techniques. User education is the number one defense. This class of attacks, commonly known as 'cognitive hacking' representĪ variation of social engineering attacks and are not easily defeated by Trick the user into revealing personal information or to download and install It has become a common tactic to impersonate well known web sites to either Participate in a 'botnet' which could be used to portscan or to launch DDOS If installed, the trojan horse will connect to an IRC server and Websites resemble 'official' Microsoft sites, the patch is in fact a trojan Urging users to visit various websites to download Windows patches. We received notice about fraudulent messages sent via ICQ and MSN Messanger,

What is icq used for