Jan 24, 2008

Symbian worm spreading in the wild

Security consultants Fortinet are reporting a new SymbianOS worm that seems to be spreading ‘in the wild’.

The worm, dubbed SymbOS/Beselo.A!worm is targeting S60 devices, including the Nokia 6600, 6630, 6680, 7610, N70 and N72.

The worm is spread by a .SIS file (an S60 program) disguised as an mp3, jpg or realmedia file that is downloaded or received via MMS. Once opened, the worm installs itself and starts trying to spread by sending a copy of itself via MMS to contacts from the infected phone’s addressbook.

Interestingly, the worm also randomly generates some numbers from a Chinese mobile network and tries to send itself to them as well.

Fortinet’s own anti-virus product will remove the infection (presumably other mobile antivirus companies will release updates to cover it as well - check with your vendor). The simplest way to check if you have been infected is to look for any unexplained MMS in your sent box.
Source...

No comments: