Skype has resolved a security bug that made it possible for hackers to steal accounts, the popular Internet phone service said.
"We...
have made updates to the password reset process today so that it is now
working properly," Skype said in its blog post Wednesday. "We are
reaching out to a small number of users who may have been impacted to
assist as necessary."
Skype's vulnerability allowed a hacker to
use the same email address as that of the intended victim to create an
account in the system. The hacker could then reset the password for all
accounts associated with that email, thus locking out the account owner
from Skype, according to tech media website CNET.
Skype earlier Wednesday suspended its password reset feature to prevent hackers from taking advantage of the flaw.
According
to messages on Community.Skype.com, information about Skype's
vulnerability to hacking had already been published in July this year,
but nothing had been done to address this weakness.
Skype was
established in 2003, and currently has over 500 million registered
users. Microsoft bought Skype in 2011 for $8.5 billion.