Security News > 2023 > August > Easy-to-exploit Skype vulnerability reveals users’ IP address
A vulnerability in Skype mobile apps can be exploited by attackers to discover a user's IP address - a piece of information that may endanger individuals whose physical security depends on their general location remaining secret.
Vulnerability specifics have not been publicly shared since it has yet to be patched, but Cox says it's "Trivially easy to exploit and involves changing a certain parameter related to the link."
The vulnerability allows attackers to send a message with a link that will reveal the recipient's IP address when they open the message.
According to Cox, the attack works if the recipient uses the Skype mobile app, but Mac users are safe.
Until Microsoft fixes the issue, users that may be in the crosshairs of determined attackers should refrain from using the Skype mobile app.
According to Cox, using a virtual private network to connect to Skype will not hide the recipient's real IP address from the attacker.
News URL
https://www.helpnetsecurity.com/2023/08/29/skype-vulnerability-ip-address/
Related news
- Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor (source)
- APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262) (source)
- Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs (source)
- Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus (source)
- Cisco fixes root escalation vulnerability with public exploit code (source)