Saturday, September 5, 2009

VoIP Usage

VoIP technologies and implementations

Voice over IP has been implemented in various ways using both proprietary and open protocols and standards. Examples of technologies used to implement Voice over Internet Protocol include:

* H.323
* IMS
* SIP
* RTP

A notable proprietary implementation is the Skype network. Other examples of specific implementations and a comparison between them are available in comparison of VoIP.

Skype Trojan malware can secretly record VoIP calls

Security researchers have spotted attack code published on the web that could allow hackers to secretly record

audio and video sent over the Skype VoIP service. The Trojan malware called Skype.Peskyspy records Skype

calls and stores them as an mp3 file for later transmission.

The Trojan injects a dll component into a Skype process and then hooks the "send" and "recv" APIs in Skype to

the Trojan's own custom functions, according to web security firm Sophos.

"This allows the Trojan to extract and save the audio and video data and send it back to the attacker," wrote

SophosLabs researcher Richard Cohen on the company's blog.

Although Skype secures the data while it's being transmitted between callers, the Trojan can intercept the data at

the sender or receiver end.

"In this case, you yourself can be secured to the hilt, but if the person you're talking to on Skype has a Trojan

installed then it's still going to steal the words right out of your mouth," Cohen wrote.

The Trojan was discovered by a major internet security firm, which reported that the Trojan is being spread via

email links and social engineering attacks in spam emails and messages, according to the Tech Herald.
ADNFCR-1765-ID-19337585-ADNFCR

The must-have headset

Custom-built to work with Skype – at a price you can afford.

All subscriptions include voicemail so you'll never miss a call and an online number discount. To call mobiles and landlines that are not covered in your subscription simply buy some Skype Credit.

No comments:

Post a Comment