Attackers could then register for a new account using the same address. All that was required, according to the post, was knowledge of the e-mail address of the victim. The update followed a report published to a Russian-language user forum (Google translation here) that claimed Skype users were vulnerable to easily performed account-takeover attacks. The officials didn't say how many people were affected.
The vulnerability "affected some users where multiple Skype accounts were registered to the same e-mail address," and company officials have contacted "a small number of users who may have been impacted to assist as necessary," a post published on Wednesday to the Skype status blog said. Microsoft has updated the password-resetting capabilities for its Skype service to fix a flaw that reportedly made the feature vulnerable to account-takeover attacks that were trivial to carry out.
0 kommentar(er)
