Malware Attacks Nokia Handsets

Filed in archive Malware on January 23, 2008

A new worm targeting the Symbian OS has launched an attacks on cell phone networks. The worm, called SymbOS/Beselo.A!worm, is able to run on Symbian S60 enabled phones. This includes Nokia 6600, 6630, 6680, 7610, N70 and N72 handsets. The worm is disguised as an MMS message with a name like Sex.mp3 or Beauty.jpg, Such names tempt users into downloading the malicious file. Once installed, it harvests all the phone numbers in the phones contact list and sends them an MMS with the worm. It also sends itself to several generated numbers as well-all located in China and from the same cellular service provider.

Gulliaum Lovet, manager of Fortinet's Threat Response Team, found the worm and told Techworld:

"It is actual spreading in the wild," said Lovet, "although numbers are still pretty low." He confirmed that the worm only affects Symbian S60 enabled devices. When you want to seed or inject worm in the wild, then you may want to seed in high populated areas," he continued. "The Chinese mobile operator concerned is the largest in the world with 300 million users, so maybe the virus writers thought it would be a good idea to go for mobiles in highly populated areas."

Cell phone malware is still relatively rare, but appears to be increasing.