Update your skype emails now - account hijacking vulnerability

Chris22

Regular Member
Joined
Sep 29, 2010
Messages
400
Reaction score
1,069
Here's the original link where I've read about this (in Russian) - http://habrahabr.ru/post/158545/
with multiple people in the comments confirming it works and also reporting their accounts were stolen.
Here's how it works:
1. Sign up for a new Skype account. Use the victim's email. A warning will come up that an account with that email already exists, but you can still proceed with filling out the form and account creation.
2. Log in to the Skype client with your new account.
3. https://login.skype.com/account/password-reset-request - request a password reset using the victim's email.
4. You will get a password reset notification and token in your skype client. Follow the link to pick the victim's account and reset the password.
It appears the only way to safeguard yourself for now is to change your main Skype account email to one that's not publicly known.

source:
http://www.reddit.com/r/netsec/comments/13664q/skype_vulnerability_allowing_hijacking_of_any/c715m20
 
Thnx for the info :D
Thanks added :)
 
wow, I just tried it on your Skype account Chris22 and it actually works



j/k

Thanks for the heads up :)
 
Back
Top