F-Secure: Commwarrior claims first big victim

By Tom Espiner, Special to ZDNet Asia
Thursday, September 01, 2005 11:44 AM

The first serious outbreak of a mobile-phone virus in a company has been detected, according to security specialist F-Secure.

F-Secure security expert Patrick Runald said Tuesday that an outbreak of the Commwarrior.B virus occured at an unnamed Scandinavian company last Wednesday.

"This is the first time a mobile virus has infected an organization," Runald said. "It's a particularly nasty version of Commwarrior, as it just doesn't give up."

Commwarrior targets mobile phones that use the Symbian Series 60 operating system, and the bug spreads using Bluetooth and multimedia messaging technology, or MMS.

There are a few variants of the bug. With Commwarrior.A, an infected phone will spend the period between 8 a.m. and midnight attempting to spread the infection to other phones. Between 7 a.m. and 8 a.m, it attempts to delete evidence of its activity.

Commwarrior.B, on the other hand, "will continuously try to send itself for 23 hours out of 24," Runald said. "It's nastier than CommWarrior.A."

One of the employees at the company in question apparently received Commwarrior.B via, and then activated it by opening the program. "The virus then sent itself to every address in the address book; it was opened by more employees, who activated it, and it spread," Runald said.

Warnings that the messages did not come from a secure source were apparently ignored by employees.

"Fortunately, this did not affect the operation of the company," Runald said. The operator at the company disabled MMS temporarily, and Bluetooth was also disabled, which prevented the spread of the virus. The phones were then disinfected.

Runald recommended this approach to any other company that becomes infected.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Use shades of gray to enhance scale in Excel

Microsoft Office Suite

Excel's palette is generous, but don't throw buckets of pigment all over your spreadsheets just because you can.


Read more »



Ultimate 2012 recovery site: the moon

Blog thumbnail

Have you seen the disaster movie "2012"? A friend from Control Risks and I did, and we reluctantly concluded we wouldn't be able to write off the cost of our..... by Nathaniel Forbes

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web