Users receiving shortened URLs in Skype instant messages, or similar IM platforms, beware, there could be a Trojan called Liftoh lurking behind the message.
To date it has hit users in Latin America, said Rodrigo Calvo, a researcher at Symantec.
When targeted, victims receive a message in Spanish containing a shortened URL. The messages appear as if they are coming from someone on the user’s Skype contact list who is linking to a photo.
If clicked, the link redirects users to 4shared.com, which is hosting a URL, which initiates a weaponized zip file containing Liftoh. The Trojan is the capable of downloading additional malware.
So far users have clicked on the malicious URLs more than 170,000 times, Symantec said.