10.01.2005 - Handy Virus «Cabir A / B / C / usw. »
Cabir is a bluetooth using worm that runs on mobile phones using Symbian (Serie 60) as operating system. It replicate over bluetooth connections to other phone which are in discoverable mode. When the Cabir worm finds another bluetooth device it will start sending infected SIS files to that device.
This network worm for mobile phones has been detected by the „Kaspersky Labs. According to their investigation the worm was written by „Vallez “.This is a pseudonym for an international group of virus writers.This group is specialized to write proof-of-concept viruses.
However,any handset running Symbian OS is potentially vulnerable to infection.
The Cabir worm only infects mobile phones which support bluetooth. The Cabir Virus is observable on the start of the handy.For a short time „Cabir “ is written to the display.
The Cabir Virus is activated by opening the infected file. Cabir replicate over bluetooth and arrive to phone messaging inbox as caribe.sis file. This file contains the worm. If the file isactivated then the worm starts looking for new device to infect over bluetooth.
Damages:
The damage of Cabir is the infection and therefore additional power consumption.
Prevention:
Remove the worm.
For further information see:
http://www.kaspersky.com/news?id=149499226
