Antivirus company warns of new Symbian Trojan

Fontal.A is a new Trojan horse program that runs on Symbian Series 60 mobile phones and prevents them from restarting.

Antivirus company F-Secure is warning mobile phone users about a new malicious software program that infects phones that use the Symbian Series 60 operating system, preventing the phones from starting.

The Trojan horse program, dubbed Fontal.A is not a worm or virus, and would have to be downloaded by the phone's owner to infect a Symbian phone. It is just the latest example of malicious code, including worms and viruses, that target mobile devices.

Fontal.A was discovered on Wednesday and is transferred to mobile phones as an SIS format installer file called "Kill Saddam By OID500.sis," F-Secure said.

Once installed, the program damages the phone so that the phone cannot reboot. Mobile phone users who are infected with Fontal should not turn off their phone before removing the Trojan, F-Secure said. The company posted instructions for removing the Trojan from infected phones on its Web page. (See: http://www.f-secure.com/v-descs/fontal_a.shtml.)

Unlike earlier threats to mobile devices, such as the Cabir worm, Fontal does not attempt to spread from phone to phone. Phone users could only be infected by downloading the SIS file containing the Trojan from a Web site or peer-to-peer file-sharing network, F-Secure said.

Malicious programs that run on mobile platforms, such as Symbian, have become more common since Cabir, the first mobile worm, was identified in August 2004. Variants of Cabir have since spread to 16 countries, including the U.S., Japan, and France. In March, antivirus companies also identified the first mobile phone worm, CommWarrior, that spreads using MMS (Mobile Messaging Service).

Trojan horse programs have also been proliferating. In March, antivirus companies warned about the Drever.C Trojan, which infected Symbian phones and attempted to stop mobile antivirus software running on those devices.

More about: F-Secure, Symbian

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the Computerworld comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
Whitepapers
All whitepapers
Sign up now to get free exclusive access to reports, research and invitation only events.
Featured Download
/downloads/product/58/seamonkey/

Seamonkey

Seamonkey includes an Internet browser, email and newsgroup client with an included web feed reader, HTML editor, IRC chat and web development tools. SeaMonkey will ...

Computerworld newsletter

Join the most dedicated community for IT managers, leaders and professionals in Australia