Last week reports came out stating that the Dorkbot worm is now targeting Skype users. The worm fools users into downloading the malware, whose payload locks down machines. Once infected, users' contact lists are pinged with the message "LOL is this your new profile pic?" and a .zip file. When the .zip file is clicked it opens a backdoor and installs the worm. The machine is then enlisted into a botnet and users are asked to make a $200 payment within 24 to 48 hours in order to receive their files back.
This ransomware aspect of the worm is a new element compared to the previous strains that affected Facebook and Twitter.
Below is a comment from Dominique Karg, Chief Hacking officer from AlienVault, on why he thinks the Dorkbot will not be as effective as it could have been:
- DOMINIQUE KARG, CHIEF HACKING OFFICER, ALIENVAULT
- InfoSecurity
- Posted On




