Russian hackers attack via MMS
Date: March 11, 2005Source: Computer Crime Research Center
By:
The threat of mobile phone viruses increased yesterday with the revelation of a mobile phone virus called Commwarrior, which has the potential to spread globally through MMS (Multimedia Messaging Service). In addition, the virus can replicate locally through Bluetooth wireless technology – the means by which mobile viruses like Cabir and its variants have thus far been spreading. In this manner, it speeds up the draining of the phone’s battery.
The first indication of Commwarrior was made already in January in a Serbian discussion forum warning of a virus spreading among Symbian Series 60 platform phones by randomly sending MMS messages automatically to an infected phone’s contacts list. MMS text messages can include an image, audio or video elements. Commwarrior sends MMS messages from one phone to another or to the phone owner’s email contacts.
Viruses that distribute through wireless networks also have appeared earlier. For instance, Cabir worm is able to delve into a smartphone or communicator through Bluetooth. However, Cabir (and other similar viruses) operates in the area of its "movement" which is limited by the local wireless network range, it is about 10 meters.
That's why MMS virus represents the other threat. By sending MMS doing, the virus has the potential to spread globally. So far, however, it has failed to do so and is replicating slowly – an anomaly being carefully investigated by the F-Secure Anti Virus Research Team. First indications suggest that the virus is Russian in origin, and CCRC experts agree with that, as it contains text that says "OTMOP03KAM HET!" which roughly translates as "No to braindeads".
F-Secure Mobile AntiVirus can already detect Commwarrior – an update which was made within two hours of its detection. In the event that a user’s Symbian Series 60 phone is not running the F-Secure client, it is advisable not to install unknown applications arriving in MMS messages and keep Bluetooth in undiscoverable mode.
The full list of vulnerable mobile phones can be viewed here : http://www.symbian.com/phones/index.html.
Add comment
Email to a Friend
