Saturday, June 11, 2005

Mobile Trojan Pretends As Anti-Virus Software

On Friday, June 10, 2005, anti-virus vendor F-Secure announced a variant of the Cabir worm aimed at Nokia smartphones pretends to be legitimate anti-virus software.

Skull Virus

The Skulls.L trojan is a variant of the Skulls.C trojan except it masquerades as an illegally copied version of F-Secure's Mobile Anti-Virus program. The trojan is aimed at smartphones based on the Nokia Series 60 platform, which is based on the Symbian OS.

F-Secure said, "Skulls.L is a malicious SIS file trojan that replaces the system applications with non-function versions." Once installed, it places Symbian-specific versions of the Cabir worms on the phones and disables legitimate anti-virus programs, including those from F-Secure.

The Cabir virus activates only when users try to run the bogus programs and when the Skulls.L is activated, it will display a message saying: "F-Secure Antivirus protect you against the virus. And don`t forget to update this!".

F-Secure warned users to download its anti-virus files only from F-Secure servers and noted that the official files are signed so that the source can be verified.

Source

0 Comments:

Post a Comment

<< Home