Skype Fraud

tronator

donal_f wrote: »

I'm very confident that I haven't been the victim of phishing and my PC's are clean and virus free (I work in IT myself). So, not quite sure how they hacked my account?

There are a few possibilities

- dictionary attack
- same password as at another website
- ???

I always use unique randomly generated passwords and keep it in my KeePass database, secured with a strong password

donal_f

Either are possible - my password didn't have any numbers in it - although it wasn't a standard word. I have also used the same password on lots of other sites (I have a more secure password I use for banking, PayPal etc...).

The following thread is also interesting:

http://hubpages.com/hub/Skype-fraud-security-problem-this-affects-everybody-with-a-Skype-account

I notice that I've been setup as administrator of a business also - and the hacker used this to transfer my credit to another account. It looks like there's a bit of a security flaw in Skype's security model and these groups can be setup without any notification email to the administrator!

tronator

donal_f wrote: »

I have also used the same password on lots of other sites

This is an absolute NO NO! How do you know how (or if at all) one of the sites encrypts your password?

weegie.geek

Or if the site itself gets compromised or not. Using the same password for a login you'd care about losing is silly.