Symbian mobile worm spreading fast

Attack targets mobile operating system

Written by Shaun Nichols in California

Security researchers are warning of a new piece of malware targeting smartphones equipped with the SymbianOS.

SymbOS/Beselo is currently spreading through the wild in Asia, deceiving victims by posing as an image file.

The attack is launched via an MMS message in which the user is sent a file called either 'beauty.jpg,' 'love.rm' or 'sex.mp3'.

McAfee researcher Jimmy Shah explained on a company blog that the worm plays on the unique way in which SymbianOS runs application files.

Most operating systems will match a file with its preferred application based on the file extension. A file ending in .jpg will be loaded inside an image viewer, while a .exe file will be recognized as an application.

Symbian, however, does not load files based on extensions. Even though the worm may have a .jpg extension, it is still recognised and loaded as an application, said Shah.

On being launched, the worm copies itself into the user's memory card and sets itself to load on startup.

The malware then attempts to send itself to every contact on the user's phone. It also generates random numbers to send itself to and attempts to spread to any nearby device via Bluetooth.

Because the infectious message will often come from a friend or trusted contact and is not obvious as an application, Shah warned that the malware could have a very high rate of infection.

"The message says 'photo' and it comes from a friend, so the user is likely to open it to see the photo," he wrote.

"When the request to install pops up, it's very likely the user will click OK and be infected."

See also:

reader comments

related articles

Mobile worm spreads through networks

Beware attachments promising erotica 22 Jan 2008

 

Storm resurfaces for Valentine's Day

Old worm, old trick 17 Jan 2008

Storm botnet connected to phishing ring

Experts fear hackers selling time on botnet 10 Jan 2008

Spam levels reach 95 per cent in 2007

Spammers getting more and more inventive 10 Jan 2008

vnunet.com analysis: The malware 'shadow economy'

Online criminals using techniques of the free market 09 Jan 2008

Mobile worm spreads through networks

Beware attachments promising erotica 22 Jan 2008

New mobile virus goes 'old school'

Windows Mobile attack rehashes dated infection technique 14 Nov 2008

Ransomware attacks target Symbian mobiles

Pay up, or you'll never see your text messages again 05 Mar 2008

latest news

Ingram loses commercial director

Bhavesh Patel set to leave at the end of the month 09 Jan 2009

Ramesys plays IT sheriff of Nottingham

Reseller secures first contract under Primary Capital Programme 09 Jan 2009

Ironport slams partner margin erosion claim

UK partner manager hails content security vendor’s acquisition by Cisco as a boon for UK resellers 09 Jan 2009

poll

Challenging times ahead?

Challenging times ahead?

Do you think there will be a lot of channel job cuts in 2009?

Previous poll results

Paul Anderson, Trend Micro

Vendor Q&A: Paul Anderson, Trend Micro

During this Q&A session Paul Anderson, UK country manager of Trend Micro talks about the changing threat landscape and how Trend is working with resellers in 2009

Sara Yirrell and Rick Wallis

Vendor Q&A: Rick Wallis, NEC Computers

In this exclusive vendor Q&A, Rick Wallis, UK sales director at NEC Computers talks to CRN editor Sara Yirrell about his firm’s plans for the channel.

events

Channel Expo 2009 logo

Channel Expo 2009

The UK's top reseller exhibition will return to the NEC on 20 May 2009

CRN Fight Night 2009

The channel's only white-collar boxing event is back

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation