Anti-virus software company Kaspersky Labs says it has verified a network worm that propagates via mobile networks. The worm, called Cabir, infects telephones running the Symbian OS. The worm has not yet caused any security incidents, according to the company, and does not appear to carry any malicious payload.
Kaspersky said the worm was created by a virus writer using the name Vallez, a pseudonym employed by 29a, an international group of virus writers. The group specializes in creating proof-of-concept viruses.
Cabir is transmitted as an SIS file (a Symbian distribution file), disguised as a Caribe Security Manager utility, part of the telephone security software. If the infected file is launched, the telephone screen will display the inscription "Caribe". The worm is activated each time the phone is started, scanning for all accessible phones using Bluetooth wireless networking technology. It will transmit a copy of itself to the first phone it reaches.
www.kaspersky.com
