Vulnerability Development mailing list archives

ICQ (Was Re: Administrivia #4883)


From: imrang () BTINTERNET COM (Imran Ghory)
Date: Sun, 16 Jan 2000 13:37:14 -0000


On 14 Jan 00, at 17:25, Ken Williams wrote:

i have received reports that ICQ 99* and later surreptitiously snag credit
card data from your HD and send it to Mirabilis, without any notification
or confirmation.  these reports are unsubstantiated - based on the report
sources though, this is worth looking into.

Highly unlikely, as there are much easier ways to get credit card details. Also the market share
of ICQ means Mirabilis is unlikely to take such a risk just for credit cards.

It couls be that there exists a trojan which is responsible, but even then it is unlikely that it
would be able to obtain credit card details, unless it was specifically targeting a certain type of
data in a certain program.(e.g data being encrypted by IE).

Imran Ghory


Current thread: