|
ICQ security issues
Icq is a chat client that allows users to send instant messages , files , start a chat room etc etc , the list seems endless , but the problem with icq is it has been plagued with security problems and every time a security problem is fixed another on is found .
File receiving through icq :
When sending a file through icq it is very easy to spoof (make it look like something its not ) the file name , all the hacker has to do is name the trojan server mypicture.jpg .exe note the huge space between the .jpg and the .exe , this file is an exe file but when you receive it in icq it will only show mypics.jpg , because of the way icq is made the .exe will be hidden , and if the reciever choses to open the file on completion of the transfer without looking at it they will become infected .
Always have a look at the file extension first before you open it . Another note , there is also at least one program specially designed to spoof files through icq so beware .
Is your ip number really hidden ?
You may think that your ip number is hidden because you chose to hide it in the icq security options but most of these wannabe hackers can see your ip anyway , they use programs that can either resolve the ip number from the uin , or there icq has been cracked ( changed ) so it bypasses your security option and shows your ip number in your user info anyway . The best way to fix this problem is to go invisible all the time , and only go visible to your friends you trust , if a hacker adds your to his/her list then make sure you try and add them as well and then put them your invisible list , that way it can be very hard for them to get your ip , and it is even harder if you do not message them back . If you do message them back they can easily just go to the msdos prompt and type netstat -a , your ip number will be there for them .
Icq house exploit
If you are using older versions of icq 99 , hackers maybe able to steal any file from your computer they want , they can even steal your icq account by getting hold of certain icq files and decrypting them to get your password . The hackers use a normal web browser like internet explorer and they put the victims ip number in to access the icq homepage web server that runs off your computer , I'm not going to tell how its exactly done but it basically the hacker tricks the icq homepage web server into allowing access to your computers files .
Account stealing
There is actually a market for icq numbers , a good 6 figure number is worth hundreds of dollars , there are a lot of hackers that target these numbers , if they think ou have a good number they will use any means they can think of to steal it , a lot of the time they will use very simple tricks like actually asking the person for the password and pretending to be from miribilis . Other ways include getting you to change your email address to their email address and then emailing icq admin saying someone stole the account and could they please email them the password . There are a lot of different simple tricks that hackers like this use but it mostly all falls down to the fact that the account owner was stupid enough to believe a complete stranger .
|
|
