Please support our Tech Talk advertiser:
Jan 23rd, 2008, 8:40 pm
•
•
•
•
The Fortinet threat response team has reported a new and malicious Symbian OS based worm that is currently actively infecting mobile phone networks. According to Fortinet, the worm comes packaged in disguise as a multimedia file with a name such as sex.mp3 or love.rm and enables it to easily con the average mobile phone user into installing the software onto their handsets. The SymbOS/Beselo.A!worm, as it has been none too snappily named, can exist on several different Symbian S60 enabled devices including popular Nokia 6600, 6630, 6680, 7610, N70 and N72 handsets.
Once installed, the worm gets to work harvesting every phone number contained in the handset address book and then starts to systematically target them with a viral MMS carrying a SIS-packed (Symbian Installation Source) version of the worm in order to spread itself. Of course, like all such malware the worm does more than just that. It also sends itself to other numbers which so far have all been found to reside in China. Fortinet is still investigating the purpose and nature of these calls.
Let's not get too carried away with this though, Fortinet admits that the prevalence of this mobile malware is "still low" and users can fairly easily check their message outboxes for unrecognised entries which would hint at infection if they are at all worried.
Of course, Fortinet would also argue that installing the FortiClient Mobile antivirus on the handset would automatically detect and remove the worm, but to be honest as long as you display a modicum of common sense and restraint as far as link clicking is concerned the danger of infection is pretty low. Then again, we all know how many people click links like they are training for some Olympic sport so maybe Fortinet has a point. The one thing that is not open to debate is that as mobile devices continue to advance technically, continue to become used as a transactional tool and continue to store ever increasing amounts of personal data so they will also become of increasing interest to the criminal fraternity.
Once installed, the worm gets to work harvesting every phone number contained in the handset address book and then starts to systematically target them with a viral MMS carrying a SIS-packed (Symbian Installation Source) version of the worm in order to spread itself. Of course, like all such malware the worm does more than just that. It also sends itself to other numbers which so far have all been found to reside in China. Fortinet is still investigating the purpose and nature of these calls.
Let's not get too carried away with this though, Fortinet admits that the prevalence of this mobile malware is "still low" and users can fairly easily check their message outboxes for unrecognised entries which would hint at infection if they are at all worried.
Of course, Fortinet would also argue that installing the FortiClient Mobile antivirus on the handset would automatically detect and remove the worm, but to be honest as long as you display a modicum of common sense and restraint as far as link clicking is concerned the danger of infection is pretty low. Then again, we all know how many people click links like they are training for some Olympic sport so maybe Fortinet has a point. The one thing that is not open to debate is that as mobile devices continue to advance technically, continue to become used as a transactional tool and continue to store ever increasing amounts of personal data so they will also become of increasing interest to the criminal fraternity.
- Davey Winder, staff writer aka happygeek
•
•
•
•
advice antivirus apple botnet browser business cellphone china crime daniweb data development email encryption exploit forensic fraud google hacking hardware help information internet kaspersky laptop linux malware mcafee microsoft mobile news nokia phishing privacy report research search security software spam spyware technology terrorism trojan virus vista web windows worm youtube
All Recent Tags Post Comment
•
•
•
•
DaniWeb Marketplace (Sponsored Links)
Related Blog Entries
- Spam swings from Viagra to Versace (1 Day Ago)
- Chinese quake should not threaten Intel chip supply (2 Days Ago)
- The botnet stripped naked and exposed (3 Days Ago)
- Fedora 9: All That and a Bag O' Chips (3 Days Ago)
- F1 racing drivers at risk from hard drive blackmail plot (4 Days Ago)
- What Does the Future Hold for the OS? (5 Days Ago)
- Jasper is just a stepping stone to Valhalla for Microsoft Xbox 360 gamers (5 Days Ago)
- Is Google an open relay spammer? (5 Days Ago)
- Computing and disabilities (9 Days Ago)
- Chinese Army of Hackers attack Belgium (9 Days Ago)
Featured Entry