Main Menu

Login



Support Virus.Org

Help support Virus.Org by donating.
Donating allows us to keep this site free and pay the running costs of all our services.
Another Symbian OS worm that uses MMS PDF Print E-mail
Written by Editor   
Monday, 04 April 2005 16:17
It seems that the virus writers have been busy again, in this instance it seems the author of the Cabir Symbian worm has added a refined the MMS infection mechanism to the original Cabir code. This new worm is called Mabir.A and it is basically Cabir with added MMS functionality, both it seems are written by the same author and as a result have very similar code.

Like Cabir before it, Mabir.A is able to spread using bluetooth, using the same routine as the early variants of Cabir. Mabir.A when it activates starts the search for a bluetooth phone, then it attempts to copy itself to the first phone it finds.

The MMS spreading function of Mabir.A uses a social engineering trick to decide who to send an infected MMS message to. Instead of just sending out MMS messages to everyone in the phone users phone book, Mabir.A waits for an incoming SMS or MMS message to arrive and then sends a reply to this message with a copy of itself attached. This is an attempt to trick the recipient into thinking the attached file is legit and from someone they trust.

You can get some more information on this new Symbian OS worm here from F-Secure.

Add this page to your favorite Social Bookmarking websites
Digg! Reddit! Del.icio.us! Google! Live! Facebook! Technorati! StumbleUpon! Yahoo!
Last Updated ( Thursday, 14 September 2006 23:15 )