A security vulnerability has been identified in the mobile version of Skype that could allow an attacker to learn a user’s real IP address. This information comes from security researcher Yossi, quoted in coverage by Portal 404 Media.
According to Yossi, an attacker can infer a user’s location by sending a message containing any link. When the recipient opens that message, their IP address may be revealed to the attacker’s server. Yossi demonstrated the method with a journalist from 404 Media, noting that the IP could still be exposed even when a VPN is active.
Yossi asserts that he notified Microsoft about the issue on August 12, but claims the response was dismissive and that the exposure of an IP address was not treated as a security flaw at the time.
The situation shifted after 404 Media pressed Microsoft for comment. The company then pledged to address the vulnerability in a future product update, though no specific timeline was provided.
Skype first launched in 2003, and Microsoft acquired the company in 2011 for 8.5 billion dollars. By that point the platform boasted hundreds of millions of users, with figures indicating substantial growth in the years that followed. Projections in recent years have suggested that the user base would continue to expand toward the billions, underscoring Skype’s enduring reach in messaging and calling. These figures reflect broader trends in real time communication tools and how people stay connected across borders.
In related developments, discussions have arisen about protective steps in other services. There is growing awareness that some apps are moving to include IP address protections in calls, a shift that would help reduce exposure to network-based tracking during voice communication.