Tuesday, July 05, 2005

New Symbian trojan New Symbian trojan Doomboot.A (http://www.f-secure.com/v-descs/doomboot_a.shtml) that drops Commwarrior.B (http://www.f-secure.com/v-descs/commwarrior_b.shtml) and breaks the phone so that it does not boot anymore. While other trojans have dropped several different Cabir variants, Doomboot.A is the first known trojan that drops Commwarrior. And also the technique used to break the phone is new. What makes Doomboot troubling is the unpleasant combination of Doomboot and Commwarriors effects on the phone. The Doomboot.A causes the phone not to boot anymore and Commwarrior causes so much Bluetooth traffic that the phone will run out of battery in less than one hour. Thus the user who gets his phone infected with Doomboot.A has less than one hour to figure out what is happening and disinfect his phone, or he will lose all data.  .

No comments: