New worm aims to infect smart phones

But experts say it "won't spread"

NEWS Antivirus companies are racing to decipher the workings of the first worm to target smart phones, while saying that the current incarnation of the program poses little threat.

The worm program, dubbed Cabir by Russian antivirus company Kaspersky, apparently uses the Bluetooth short-range wireless feature of smart phones that run the Symbian operating system to detect other Symbian phones, and then transfers itself to the new host as a package file. While able to replicate the spread of the virus in research settings, antivirus companies have not found any evidence that the program is infecting smart phones outside of those limited test cases.

"I don't think it will spread," said Vincent Gullotto, vice president of Network Associates' antivirus emergency response team. The group that is thought to have created the worm "likes to make concept viruses", he said, "so they probably just wanted to show that it could work".

Antivirus companies were apparently sent a copy of the worm from the group that created it. While the program does not do anything but spread, and has not yet been detected among the public's phones, Gullotto believes that other virus writers may use the worm as a departure point for their own development.

The Symbian software dominates the smart-phone market, which remains small, representing only a thin slice of the more than 1 billion cell phones in circulation. It's expected to battle a similar product from Microsoft for the lead in the operating system market through the end of the decade. Currently, Symbian's operating system is in a majority of smart phones - devices that combine the features of cell phone and a personal digital assistant.

Hackers and researchers have repeatedly warned about problems with the security of the Bluetooth wireless standard. This worm, however, mostly takes advantage of the amount of trust the Symbian operating system invests in other Symbian-based smart phones.

After infecting a phone, the program creates an application package file containing the worm and passes it to another phone over an automatically established Bluetooth connection, according to antivirus companies. The phone that received the program installs the application, thus infecting itself.

Nokia, which took the wraps off five new phones on Monday, is in the process of buying a controlling share of Symbian, the company that licenses the operating system of the same name. Only one of the new phones runs the Symbian operating system.

Robert Lemos writes for CNET News.com. CNET News.com's Ben Charny also contributed to this report

Comments

There are 3 comments. Join the discussion

  1. 1. Rob

    Does Nokia translate into Microsoft?

    • 15 June 2004 10:42
    • Add comment
  2. 2. Neil Gooch

    Clearly, to my naive mind,I was under the impression that hi-tech solutions were developed to assist mankind in everyday life.Why then, is this not acceptable to those who seemingly because it can be done, wish to create turmoil by writing virus programmes. Where is the benefit to mankind in this behaviour? It is all very imature in my opinion.But heck, who cares so long as the monies rolling in!!

    • 16 June 2004 11:15
    • Add comment
  3. 3. benitojuarez

    hmm microsoft is going to get into the phone os business? well i guess thats a blesssing in disguise, if you ever run into an ulgy girl thats like why didnt you call me i can just say my phone crashed.

    • 18 June 2004 13:22
    • Add comment

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your silicon.com account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ

Get silicon.com's daily newsletter

  • Register on silicon.com

    Enter your email to register

Keep in touch with silicon.com

silicon.com newsletters