Researchers with PhishMe have identified and assisted in disrupting a campaign in which Skype was being leveraged to distribute adware. The threat was initially discovered when a PhishMe researcher was alerted on Skype that a user was attempting to call them, according to a Wednesday post. The user's name: "NEW VIDEO MESSAGE RECEIVED! VIEW AT WWW.VIEWROR[dot]COM." Upon clicking the link, a voice tells the recipient to click a download link in order to install a proprietary video player needed to play the alleged video message. Once downloaded and opened, the executable asks to run as administrator, and the user is then presented with a screen to install many different components – all of which are adware.

One of the several pieces of adware being distributed is known as Search Protect, which purports to offer users a more secure way of searching on the web, Ronnie Tokazowski, senior researcher with PhishMe, told SCMagazine.com in a Wednesday email correspondence. Tokazowski explained that Search Protect sits on the user's system and installs alongside their browser. When the browser is opened, the user is brought to Trovi search, which is a search engine riddled with advertisements, he said.