p2pnet.net News:- Russian programmers say they’ve discovered the first mobile phone virus.

Antivirus company Kaspersky Labs Ltd says the new virus, called Cabir, infects telephones running Symbian OS, states Russia’s MosNews here going on:

“So far, Cabir does not seem to have caused any security incidents.”

Kaspersky Labs believes the worm was probably created by a virus writer named Vallez, a pseudonym, “used by 29a, an international group of virus writers. The group specializes in creating proof-of-concept viruses. Among the group’s creations are Cap, the first macro virus to cause a global epidemic; Stream, the first virus for additional NTFS streams; Donut, the first virus for .NET and Rugrat, the first Win64 virus.”

Preliminary analysis of the malicious code, “shows that Cabir is transmitted as an SIS file (a Symbian distribution file), but the file is disguised as Caribe Security Manager utility, part of the telephone security software,” states MosNews.

“If the infected file is launched, the telephone screen will display the inscription ?Caribe.? The worm penetrates the system and will then be activated each time the phone is started. Cabir scans for all accessible phones using Bluetooth technology and sends a copy of itself to the first one found.”

Cabir is transmitted via Bluetooth, from the infected phone to the first it finds within range, says a PC Pro story here.

“It transmits itself as an SIS (Symbian OS distribution) file that masquerades as a Caribe Security Manager utility. If the worm is executed, the handset will display the inscription Caribe and will activate each time the phone is started. Kaspersky says that no other damage is done by the worm.”

MosNews says no malicious payload has been detected – so far.

This entry was posted on Tuesday, June 15th, 2004 at 3:43 pm and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

HOME

Viewed 1659 times