OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Vuln-Dev Archives: ICQ (Was Re: Administrivia #4883)

ICQ (Was Re: Administrivia #4883)


Subject: ICQ (Was Re: Administrivia #4883)
From: Imran Ghory (imrangBTINTERNET.COM)
Date: Sun Jan 16 2000 - 07:37:14 CST


On 14 Jan 00, at 17:25, Ken Williams wrote:

> i have received reports that ICQ 99* and later surreptitiously snag credit
> card data from your HD and send it to Mirabilis, without any notification
> or confirmation. these reports are unsubstantiated - based on the report
> sources though, this is worth looking into.

Highly unlikely, as there are much easier ways to get credit card details. Also the market share
of ICQ means Mirabilis is unlikely to take such a risk just for credit cards.

It couls be that there exists a trojan which is responsible, but even then it is unlikely that it
would be able to obtain credit card details, unless it was specifically targeting a certain type of
data in a certain program.(e.g data being encrypted by IE).

Imran Ghory



This archive was generated by hypermail 2b27 : Sun Jan 16 2000 - 11:03:27 CST