Cabir, the first network worm for mobile phones

User avatar
eugen
Site Admin
Posts: 687
Joined: Sat Jul 05, 2003 10:42 pm
Contact:

Cabir, the first network worm for mobile phones

Postby eugen » Thu Jun 17, 2004 1:17 am

Reported initially by Russian anti-virus company Kaspersky Labs, this Worm relies on the user having Bluetooth in detect mode, opening a unsolicited beamed message and then ignoring two warnings during installation - as a "proof of concept" it is very weak. In addition Symbian's new signing regime can be used to block installation of this type of code. While mobile phones are not immune to virus and worm threats, this one is something of a non-starter.

Kaspersky Labs, a leading information security software developer, has detected Cabir, the first network worm which propagates via mobile networks. It infects telephones running Symbian OS. So far, Cabir does not seem to have caused any security incidents.

It seems that the worm was writtten by "Vallez". This pseudonym is used by 29a, an international group of virus writers. The group specialises in creating proof-of-concept viruses. Among the group's creations are Cap, the first macro virus to cause a global epidemic; Stream, the first virus for additional NTFS streams; Donut, the first virus for .NET and Rugrat, the first Win64 virus.

Preliminary analysis of the malicious code shows that that Cabir is transmitted as an SIS file (Nokia Phone Game File), but the file is disguised to be a Caribe Security Manager utility, part of the telephone security software. If the infected file is launched, the telephone screen will display the inscription "Caribe". The worm penetrates the system and will then be activated each time the phone is started. Cabir scans for all accessible phones using Bluetooth technology, and sends a copy of itself to the first one found.

Analsysis of the worm's code has not so far detected any malicious payload.

The worm is coded to run under Symbian OS, used in many Nokia telephones. However, it is possible that Cabir will function on handsets produced by other manufacturers.

---------

nu imi fac probleme cu "Worm relies on the user having Bluetooth in detect mode, opening a unsolicited beamed message and then ignoring two warnings during installation" - la cat is de tufa astia pe aici..

SoulP
Posts: 1
Joined: Thu Apr 08, 2021 9:03 pm

Re: Cabir, the first network worm for mobile phones

Postby SoulP » Thu Apr 08, 2021 9:08 pm

From the time when people began to try to explain everything incomprehensible with scientific approaches and not religious ones, everything fell into place. So we reached the era of microelectronics and computer technology. Recently, my younger brother asked me how the search engine works. And then I caught myself on a soap that I don't quite know. For a little bit of service on the Internet, I found an article about the Information Extraction technology. As it turned out, this is the very magic wand that the search engine uses.

User avatar
jolly joker
elder
elder
Posts: 1959
Joined: Fri Apr 10, 2020 6:05 pm
Location: unknown

Re: Cabir, the first network worm for mobile phones

Postby jolly joker » Thu Apr 08, 2021 9:27 pm

Finally, something useful.


Return to “Software”

Who is online

Users browsing this forum: No registered users and 1 guest