Video | Business Headlines | Internet | Science | Scientific Ethics | Technology | Search

 

New SymbianOS Worm Spreading In the Wild

New SymbianOS Worm Spreading In the Wild

Sydney – Jan. 22nd , 2008– Fortinet® - a pioneer and leading provider of unified threat management (UTM) solutions - today announced that the FortiGuardGlobal Security Research Team discovered a new SymbianOS Worm actively spreading on various mobile phone networks.

The worm, deemed SymbOS/Beselo.A!worm is able to run on several Symbian S60 enabled devices. These devices include, but may not be limited to, Nokia 6600, 6630, 6680, 7610, N70 and N72 phones.

After an installation phase, the worm engages in a propagation routine. Phone numbers located in the contact list of the devices are harvested, and targeted by a viral MMS carrying a SIS-packed (Symbian Installation Source) version of the worm. However, the SIS file does not bear a .sis file extension -- rather, it is disguised as a multimedia file with an evocative name: either Beauty.jpg, Sex.mp3 or Love.rm.

Unlike Microsoft Windows, SymbianOS types files based on their contents and not their extensions, so it is worth noting that recipients of infected MMS would still be presented with an installation dialogue upon "clicking" on the attachment. Therefore, users could easily be deceived by the extension and unknowingly install the malicious piece of software.

In addition to harvesting the numbers stored in the phone address book as mentioned above, the Beselo worm sends itself to generated numbers as well. Interestingly, all those numbers are located in China and belong to the same mobile phone operator. Some of those numbers have been verified to belong to actual customers, rather than being premium service numbers. The whys and hows of such a routine are still under investigation.

Users may know they have been infected if they see unrecognized sent messages in their MMS outboxes (the device needs to be configured to save such messages). FortiClient Mobile automatically detects and removes the Beselo worm. For users without FortiClient Mobile who believe they may be infected, please contact your mobile carrier or phone manufacturer for technical support in manually removing the virus.

Although the prevalence of this mobile malware incident is currently still low, the FortiGuard Global Security Research Team will continue to monitor the situation and update new information at www.fortiguardcenter.com with updates.

About Fortinet (www.fortinet.com ) Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats.

Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting.

Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California. # # # Fortinet is a registered trademark of Fortinet, Inc. Fortinet, FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiCare, FortiManager, FortiWiFi, FortiGuard, FortiClient, and FortiReporter are trademarks of the Fortinet, Inc. in the United States and/or other countries. All other trademarks referred to herein are the property of their respective owners.

ENDS

© Scoop Media

 
 
 
 
 
Business Headlines | Sci-Tech Headlines

 

Snail-ier Mail: NZ Post To Ditch FastPost

New Zealand Post customers will see a change to how they can send priority mail from 1 January 2018. The FastPost service will no longer be available from this date. More>>

ALSO:

Property Institute: English Backs Of Debt To Income Plan

Property Institute of New Zealand Chief Executive Ashley Church is applauding today’s decision, by Prime Minister Bill English, to take Debt-to-income ratios off the table as a tool available to the Reserve Bank. More>>

ALSO:

Divesting: NZ Super Fund Shifts Passive Equities To Low-Carbon

The NZ$35 billion NZ Super Fund’s NZ$14 billion global passive equity portfolio, 40% of the overall Fund, is now low-carbon, the Guardians of New Zealand Superannuation announced today. More>>

ALSO:

Split Decision - Appeal Planned: EPA Allows Taranaki Bight Seabed Mine

The Decision-making Committee, appointed by the Board of the Environmental Protection Authority to decide a marine consent application by Trans-Tasman Resources Ltd, has granted consent, subject to conditions, for the company to mine iron sands off the South Taranaki Bight. More>>

ALSO:

New Report: Waitākere Kauri - Look After It, Or Lose It

With no cure for kauri dieback disease and treatment options still being trialled, the Auckland region faces a very real threat – take urgent action in the Waitākere Ranges or risk losing kauri from our forests altogether. More>>

ALSO: