New Trojan attack on Symbian S60 mobile phones
Researchers from various security firms have discovered a new mobile threat that targets Symbian phones. The worm features a signed Symbian certificate and propagates by sending malicious links via SMS to all numbers in a phone’s memory.
F-Secure’s Antivirus Research and Response team notes that this new threat, which it identifies as Trojan:SymbOS/Yxe.A, is rather new in nature for the S60 3rd Edition platform. “This is something we don’t see very often. There are spy tools and other privacy threats directed at S60 3rd Edition phones, but malware is still mainly an issue on S60 2nd Edition phones,” the team says.
F-Secure characterizes this mobile malware as a Trojan because of its data stealing capabilities and the social engineering techniques employed by its creators. The malicious application is signed with a certificate that Symbian accepts, thus avoiding arising suspicions from the users.
After installation, the program gathers phone identification information such as the type, IMEI and IMSI numbers and submits them to a remote server. F-Secure published a more detailed analysis of its playload and features, according to which it seems that the application originated in China.
for more information click here
