EnterpriseMobileToday SmartPhoneToday

Home | News | Reviews | Features | Tips | Mobile Product Watch | Forums



Internet.com's premiere site for mobile managers and IT professionals is where wireless meets business. Our expert analysis and tips will guide you in buying, deploying, securing and managing mobile technology in the enterprise. You'll find strategic analysis, best practices, news, buyer.s guides and practical advice on how to evaluate and support a wide range of devices in the workforce.


SmartPhoneToday > News > Yet Another Virus Targets Smartphones

Yet Another Virus Targets Smartphones

By Tim Gray
January 13, 2005

Finnish antivirus firm F-Secure said it has detected a quick spreading and versatile new worm capable of infecting both Windows and cell phones using the Symbian operating system.

Lasco.A spreads itself by searching SIS installation files in infected devices, and attaches itself as an embedded SIS file, according to Mikko Hypponen, director of anti-virus research at F-Secure.

An SIS file in the device that gets copied to another phone will also contain a copy of Lasco.A, added Hypponen.

"The new Symbian malware combines two spreading tactics; it is common in PC malware but not with mobile systems," Hypponen said.

The worm attacks most often when users are attempting to trade programs, Hypponen said. Lasco.A will also try to infect phones that have Bluetooth connectivity that are within its range.

The latest worm to infect mobile phones is the handy work of a Brazilian virus writer who has released the source code on his Web site, more than likely making the proliferation of the mobile malware imminent, Hypponen said.

"It is going to continue to get worse," he said. "In the future, hobbyist or malware writers will have a blueprint to write their own viruses because the source codes are readily available."

In addition to spreading within infected SIS files, Lasco.A is capable of moving by itself, jumping from one device to another via Bluetooth, much like last month's Cabir virus.

Lasco.A replicates only over Bluetooth connections, arriving in a phones messaging inbox as velasco.sis, the name of the Brazilian virus writer, according to Hypponen.

When a user clicks on the velasco.sis message, the worm activates and starts looking for new devices to infect over Bluetooth.

Lasco.A can also replicate by inserting itself into other SIS files found in the device.

Hypponen said the virus can only spread on Bluetooth cell phones that are set in discoverable mode. He recommends operating the system in the hidden Bluetooth mode to avoid becoming infected.



Related Links:

  • New Cabir Variants are Spreading Fast
  • Trojan Targets Anti-Virus Achilles Heel
  • Trend Micro Targets Smartphone Threats
  • Security Update: Skulls Hit Symbian Phones
  • Mobile Guard Takes Aim at Symbian Malware

     
     Printable Version
     Email this Story to a Friend