First Destructive Mobile Phone Virus In The Wild 265
gbjbaanb writes "eek! the BBC is reporting the first mobile phone virus that causes damage is out and about. The virus only works with the Symbian Series 60's OS (no, not the Smartphone) and spreads through an adapted copy of the legitimate Mosquitos game.
Once installed, a hidden program sends SMS texts to premium rate numbers.
That's not so bad, no doubt the premium rate numbers will be switched off soon but the worst is yet to come - "typically we see them in the wild then copycat ones come along soon after," said Sal Viveros, director of wireless security at McAfee."
bah... (Score:5, Funny)
he means after they are done writing and releasing the viruses, of course.
Re:bah... (Score:2, Interesting)
I mean, you've got to admit, cell phones that do many things a computer does and require a complex OS aren't exactly new, and they've always been "networked" (by definition), but somehow it's only now that this market could provide a bail-out route from th
Re:bah... (Score:5, Funny)
**passes tinfoil hat***
Re:bah... (Score:3, Insightful)
Great.... (Score:3, Interesting)
Wow! Where'd'ya find that? (Score:5, Funny)
Maybe it's the leading edge of a whole, new category of consumer devices! The single purpose device that only does one thing, but does it well!
He said it does it. (Score:2, Insightful)
A fairly important distinction.
Re:Wow! Where'd'ya find that? (Score:4, Insightful)
Just because we can do something does not mean that we must or should do it. This is yet another example of a solution searching desperately for a problem; a feature (of J2ME) which is rushed to market in the hopes that everyone will go ga-ga over it, while the basic cellular service problems go ignored.
Re:Wow! Where'd'ya find that? (Score:3, Interesting)
They are all asking their R&D departments to come up with features that give the most bang for the $'s spent. While there are serious cost limitations on how the communications portion of the system can be improved, extra games are simply added software and attract customers attention.
Cameras can be explained in a similar (but more complicated) way. Camera hardware is an added expense, BUT the phone servic
Re:Wow! Where'd'ya find that? (Score:3, Insightful)
keep finding more and more features that we don't need while ignoring the one feature that we all demand: reliable voice coverage.
Why does everybody think cell phone manufacturer's are the ones who are installing cell sites? I can make a simple voice phone if I want to, but it's not going to do anything at all to the number of cells in the field. Cell manufacturers take the radio performance of their handsets very seriously -- but that means precisely jack when there's no signal to pick up, or your car
coolness wins out over performance (Score:3, Informative)
What makes no sense is that if the network coverage is suffering from what it could be, I can't take full advantage of these premium services. I can't send you a picture of my--uh, me if I get a weak or non-existent signal.
Has an
Re:Great.... (Score:5, Interesting)
Once they make a phone that fixes problems like these and works with the service in a way that I can make and receive good quality calls, THEN I'll be interested in what they have to say about other uses of mobile phones.
Nokia vs. motocrap (Score:2)
The thing I have now is loaded with features, but the basic interface is shit. The most annoying thing -- The ringer is to quiet, and I can't set it to ring and vibrate at the same time. I miss calls when I'm listening to loud music, now, that I
Re:Great.... (Score:5, Insightful)
I know, I was like talking to a friend the other day, and he said he saw a computer with "CD-ROM" device attached to it. What's the point in that? Who'd ever need to play music on a computer? All you need is to be able to print letters. Floppy disks ought to be big enough for everyones storage needs.
/sarcasm (circa 1992)
Re:Won't help (Score:2)
bandwith is not necessary to be annoying (Score:5, Insightful)
"Having that connectivity historically leads to the spread of viruses."
Once more and more devices run the same OS/software and more and more people are using that same OS/software more and more viruses will be written for it. Bandwith has little to do with it.
SMS' to "premium numbers" are annoying and don't require massive mobile bandwith to work.
Re:bandwith is not necessary to be annoying (Score:2)
They do, however, require both the programmable technology to install/run and, in this case, the user to deliberately acknowledge the existence of something installing/running. You have been told. :-)
Re:bandwith is not necessary to be annoying (Score:5, Insightful)
Re:bandwith is not necessary to be annoying (Score:3, Informative)
Re:bandwith is not necessary to be annoying (Score:2)
Re:bandwith is not necessary to be annoying (Score:2)
Sorry that you were unclear on the concept.
Re:bandwith is not necessary to be annoying (Score:5, Funny)
Just a second! Sun's been telling me to use Java because it's secure! [sun.com]. Certainly, we all know from reading /. that only Microsoft is vulnerable to these 'trojan horse' attacks because their software is poorly written!
Are you telling me that Java is poorly written? Or is there really no defense against tricking users into loading and running programs (as most Windows "viruses" of the past year or so have spread).
If that's true, then phones shouldn't be able to run software at all!
Re:bandwith is not necessary to be annoying (Score:3, Interesting)
Re:bandwith is not necessary to be annoying (Score:4, Interesting)
Not quite as I'd have thought. (Score:5, Interesting)
Of course, worm writers will still catch on quickly anyway, I'll bet.
Re:Not quite as I'd have thought. (Score:4, Interesting)
Personally, if I were charged for SMS' without my consent I would want to recoup those costs myself as well.
Re:Not quite as I'd have thought. (Score:2)
Re:Not quite as I'd have thought. (Score:2, Interesting)
The ONLY difference here is that it uses a premium, possible-pay-per-use medium to make the calls and is thus, afaic, not too different from those porno over-seas 900 dialers that were a big deal last year. This is not clever and it is probably illegal under computer abuse acts (sure would be in the U
Nope - "virus" is a broken anti piracy system (Score:5, Informative)
Get the full shimmy here [theregister.com].
Re:Nope - "virus" is a broken anti piracy system (Score:4, Funny)
Re:Nope - "virus" is a broken anti piracy system (Score:2)
Re:Nope - "virus" is a broken anti piracy system (Score:2)
That is, assuming it came with such a EULA.
Re:Nope - "virus" is a broken anti piracy system (Score:2)
Re:Nope - "virus" is a broken anti piracy system (Score:3, Interesting)
it only gets distributed by people..
it's a sms sender attached to a warez release - nothing more nothing less.
Re:Nope - "virus" is a broken anti piracy system (Score:3, Interesting)
Although the Mosquitos saga turns out to be an urban myth, the recent discovery of the first malware capable of infecting smartphones shatters the comforting belief the mobile phones are safe from viral infection. The threat is very low at present but shouldn't be completely discounted. ®
So is it real or urban myth ? Also, as repeatedly mentioned, you must install an run "Warez" version of this game for it to work. Let th
So? Dont get your software from P2P.... (Score:5, Insightful)
Shortsightedness (Score:2, Insightful)
1985: "AIDS? Why do I care? Only homosexuals and junkies get it."
Your attitude is remarkably self-centered. There are a lot of problems in the world that are aggravated by shortsighted people such as yourself.
Re:So? Dont get your software from P2P.... (Score:4, Insightful)
How? How is this unknown bad software of the future going to get on my phone? I've got a dev license to symbian and so far I've not seen any way for software to spread unchecked. Sure it could get pushed via a SMS message, but the user would have to click through it to install.
Re:So? Dont get your software from P2P.... (Score:2, Insightful)
Sure it could get pushed via a SMS message, but the user would have to click through it to install.
The same can be said about the majority of Windows malware and look at how successful that malware has been.
So stale, so wrong (Score:5, Informative)
Re:So stale, so wrong (Score:2)
Re:So stale, so wrong (Score:2)
I agree, i would call it a trojan rather than a virus
Why is this news (Score:4, Insightful)
This is more a user intelligence program than a true threat to the symbian 60 series. If it propogated to all the numbers in a phone book (via SMS for example) then it would be something worth worrying about.
WTH? (Score:3, Insightful)
Re:WTH? (Score:2)
Regular SMS messages still cost money. OK, so it's not "destructive", but it's definitely harmful.
Re:WTH? (Score:2)
Except that's not even true, since there have been viruses before that did that.
So I guess that headline should have been "New Destructive Virus, not really destructive or new though"
Correction.... it did NOT SMS premium numbers... (Score:4, Informative)
The company that made the original legitimate Mosquito game, Ojom, said it had installed the program itself in earlier versions of the game after concerns over piracy.
It was intended that the program secretly send a SMS message to alert them if an unlicensed copy was being used, according to Mr Hypponen.
Not a virus (Score:5, Interesting)
I'm also not sure it deserves to to be called destructive either. It doesn't destruct anything or in any way modify any other services on your phone - it simply sends SMS messages. It would be better classed as "expensive"
Re:Not a virus (Score:2)
Re:Not a virus (Score:2, Funny)
Malicious may have been a better word, but "destructive" like most adjectives is pretty much subjective.
If you think about it, malware is destructive if you incur a cost.. Either in time, money or both.
I'd consider this more "destructive" than a virus that, say, wiped out my address book, because that would only 'cost' me about 20 seconds to resync to my PC. This would cost me the many hours and hass
Re:Not a virus (Score:3, Insightful)
Of course, the public grasps onto Virus = Bad, regardless of its actual function
In reality, most computer viruses are fascinating studies...
--D
That is why... (Score:3, Insightful)
Re:That is why... (Score:2, Interesting)
A phone needs to be just everything it can possibly be.
Re:That is why... (Score:2)
Sure, they should sell phones that are everything they could possibly be. They also should sell simple phones for people like me who don't want shortened battery life, slower operation, increased likelyhood of failure, to have to "update" software, to have to leave my phone everytime I enter a secure area because of the camera, more complex interface, risk of viruses or any of the other reasons there are for not
mod parent -1, Luddite (Score:2)
Re:That is why... (Score:2)
clarifications (Score:5, Informative)
1. It was not a virus. A pirated version of a game included malware that SMS'd a phone number without the users permission.
2. The malware was not added by the people who pirated the game. Interestingly, it was an intended feature of the game, included by the company.
3. The original intent of the malware was to secretly "phone home" when a pirated version of the game was being played. Because of complaints, they removed this "feature" from later versions. The pirated version was old, and still includes the "feature".
What I find interesting is that they included such a "feature" to begin with.
Re:clarifications (Score:2)
So, in this case, you can't read the article
My mobile has a virus.. (Score:4, Funny)
Re:My mobile has a virus.. (Score:2)
Contact your provider. Most offer a plan that disables 1-900 calls. I have no reason to call the toll numbers. Other family members use the phone. No need for expensive suprises.
If you need to use 1-900 numbers, consider having it only on the land line. POTS phones don't run games and trojans.
(I know it's humor, laugh)
There by design ... (Score:5, Informative)
Mosquitos smartphone 'Trojan' there by design
Many news outlets [google.com], including ourselves [theregister.co.uk], reported that a trojanised version of Mosquitos game for Symbian Series 60 smartphones was circulating online [google.com] and across P2P networks. Cracked versions of the game secretly sends SMS messages to premium rate numbers, according to reports on various online forums [geekzone.co.nz].
Illegal copies of the game display the following message on start-up: This version has been cracked by SODDOM BIN LOADER No rights reserved. Pirate copies are illegal and offenders will have lotz of phun!!!
Yesterday Symbian put out a statement [symbian.com] which contributed to the impression that malign code was inserted into 'cracked' versions of the game by members of the computer underground. However it turns out that the hidden SMS functionality, along with a message written in the best vernacular VXer speak, was put in the game from the beginning by the original games publisher Ojom.
In an advisory [f-secure.com], AV firm F-Secure explains: This functionality was intended to be a copy-protecting technique - it didn't work as planned and the whole functionality backfired.
The premium rate contracts for the phone numbers have been terminated, so although old versions of the game still send hidden SMS messages, it only costs the nominal fee of sending the message itself. Current versions of this game no longer have this hidden functionality, but 'cracked' versions of Mosquitos still float in P2P network - and they still send these messages, it adds.
So what appeared to be a Trojan is actually a rather sneaky and somewhat ineffective copy-protection technique. Proof that even if something looks like a duck, talks like a duck and walks like a duck it isn't necessarily Anas platyrhynchos.
Although the Mosquitos saga turns out to be an urban myth, the recent discovery [theregister.co.uk] of the first malware capable of infecting smartphones shatters the comforting belief the mobile phones are safe from viral infection. The threat is very low at present but shouldn't be completely discounted. ®
"Destructive"? (Score:4, Informative)
Editors, please edit before posting these stories.
Re:"Destructive"? (Score:2)
Welcome to the 21st Century (Score:5, Insightful)
I don't want to live in a world where I have to download patches and updates for my phone, TV, cell phone, alarmclock, bathroom scale, toaster, fridge, etc, every other week, or worry about them charging me money or disclosing private information. Some things work just great already and don't need all sorts of crazy upgrading, networking, or convergence. If you had a portable game thingy (not connected to any network) to play 'Mosquitoes', you wouldn't have to worry about this!
Applications can access all phone functions? (Score:5, Insightful)
Phone applications/games should not be able to access any function that might cost the user money. Or if they do, then the OS itself should intercept and ask the user if they wish to allow the application to send the SMS / phone call / data call. "PsychoSolitaire wishes to send a message to +XX.YYYYYYYYY. This will cost £x. Yes/No/Never"
That is just sensible and obvious design.
Re:Applications can access all phone functions? (Score:2)
Re:Applications can access all phone functions? (Score:2)
Your logic of blocking is not unlike saying "Modern operating systems shouldn't allow an application to dial a 900 or long distance number with out the user giving permission"
This is a fine idea in theory, but creates an unnecessary burden for the software user. Of course... there is nothing to stop a software programmer from automatically clicking the yes button of the OS generated dialog box as some applic
how about actual buttons. (Score:2)
Just ignorant speculation here
Slashdot vs. Article (Score:5, Funny)
"First Destructive Mobile Phone Virus In The Wild"
"...a hidden program sends SMS texts to premium rate numbers."
Article:
"...text messages will still be sent, although not at premium rates."
"Mosquito's Trojan does not do any other damage..."
Does anyone verify that the slashdot article actually represents the real article?
Re:Slashdot vs. Article (Score:2, Insightful)
If jacking your mobile bill 100 bucks a month isn't "destructive" enough for you, then, there's nothing I can do about that.
Re:Slashdot vs. Article (Score:2, Insightful)
Re:Slashdot vs. Article (Score:3, Informative)
"...text messages will still be sent, although not at premium rates."
"Mosquito's Trojan does not do any other damage..."
Most people I know here the US do not have unlimited SMS plans. Most people don't know much about text messaging at all. So these people would be sending SMS messages out and being billed for it regardless of the numbers being "premium rate" or not.
Thus it does do damage as your bill goes up that month.
Re:Slashdot vs. Article (Score:2)
Ahhh... both points refuted! mod grandparent into the ground.
Re:Slashdot vs. Article (Score:2)
Yes, if by represent you mean "vaguely resembles" and by real you mean "lunatic interperatation inside some readers head". But the slashdot headline grabs your attention better than the more accurate "'Game virus' bites mobile phones" title that the BBC used I suppose.
Very Funny! (Score:2)
MWHAHAHAHAHA!!!!
We all know getting your article posted depends on who on the editorial staff you're sleeping with / friends with / cybering with / sucking up to.
You make it sound like articles should be posted based on merit or relevance!
You've got a great sense of humor!
Re:Slashdot vs. Article (Score:2)
This isn't so different from mainstream for-profit news.
RTFA (Score:5, Informative)
First of all, it specifically says that the phone DOES NOT text premium numbers. The problem is NOT a virus; it's not even really a trojan. It's a feature that "calls home" in case it's an unlicensed copy. Not only that, the feature was removed in later versions; the cracked version was older. They got what they deserved.
Re:RTFA (Score:2)
The submitter DID NOT read the article AT ALL, and apparenty neither did the editors.
Unfortunately you're wrong, the article on the BBC site has been "updated" since the story was initally posted. The BBC have a tendency to update their articles to correct factual errors, without actually telling you they've done it, or archiving the original (unmodified) article. If you think about it, it's actually quite scary...
Al.And that's why... (Score:5, Funny)
Clickity-click-click!
Re:And that's why... (Score:2)
3 [demon.co.uk]?
What the hell is that supposed to mean?
Cell Phone viruses (Score:5, Insightful)
Just yesterday I saw an article that said Open Source wasn't ready for Antivirus software. Well - duh! It isn't all that necessary - yet. Most viruses are ineffective on Linux/Unix/BSD/OS/X because of FHS standards, rights and permissions.
Cell phones that play games are about as useful as the teats on a boar hog (and that is a colloquialism). It's the same old game - sell them a useless but "neat" feature that violates sensible security and then sell them a patch to correct that stupidity that they have to buy and buy and buy.
If you spend your money that way - it's your choice really, now isn't it?
Re:Cell Phone viruses (Score:2)
Re:Cell Phone viruses (Score:3, Interesting)
Client file system protection makes (a) harder, but it doesn't prevent it... I suspect it's impossible in principle to prevent (a) short of running everything in a sandbox that's destroyed when you quit using it. The biggest advantage that open source systems
Re:Cell Phone viruses (Score:5, Insightful)
I love this "I don't want the feature, so it's obviously useless" attitude on Slashdot. Games on phones may be useless to you, but I and, evidently by the number of games purchased, many other people find games on phones useful. I often find myself waiting around somewhere (pub, meeting room, bus etc) and carrying very little in the way of entertainment except my phone. So being able to have a quick game of chess, or whatever, is a great way to pass the time.
Sure it's something I could live without (as is pretty much every gadget that I own), but that doesn't mean it's not useful.
Redundant. (Score:2)
This on the tail of the viop spam-fest looming; yeah, fun times ahead for phones. i can't wait for the convoluted, mostly-useless, loophole-for-biz laws that will follow all of this once lawmaker's underlings get wind of it.(you don't really believe most lawmakers have a clue about the tech-laws they pass do you?)
bah! i need a firewall for my phone now as well!!?? heh, i'm sure there'll be plenty of money made for lots o
viop? (Score:2)
Hmm... looks like someone didn't read article 1st. (Score:5, Informative)
Well, either the original article was changed or the article poster didn't really read the article to being with. :( In either case, that's kinda sad.
Though I'd thought that the crackers would have spotted their cracked software doing something unintended...
Interesteding historical tidbit... the Pakistani Brain virus was written with a similar anti-piracy intent in mind. Though that was a virus and spread destructively. This is just a trojan which is annoying.
If a writer really wanted to be destructive, they would have overwritten the Symbian OS boot code and firmware loading codes and executed a phone reboot. (nevermind the sim card and access to other data cards inserted into the phone)
Kinda makes me reconsider getting a more powerful phone... :(
I hope we see more of these. (Score:2, Funny)
Attention all Orange customers (Score:4, Informative)
Orange sends crap to your phone such as trailers for Catwoman.
The "do not download if bigger than x kb" defaults to 100k but Orange will send 99.9Kb files to bypass this.
Once again the best thing is to deactivate automatic downloads of messages.
Out of date already. (Score:3, Informative)
The Reg has the correct story [theregister.co.uk]. In short, it was deliberately done by the developers of Mosquito as a crappy kind of copy protection: copy our software and we'll send SMS messages to premium rate numbers. Now someone tell me this isn't illegal...
Poor design. (Score:3, Insightful)
It would be simple to have a popup dialog that would ask the user if they want to allow the app to dial a number.
Someone shoot the lawyers and reporters (Score:2)
It ain't a bloody virus. It ain't even a trojan. It is just piece of malware. It doesn't alter the OS, it doesn't install itself and run always. It just dials phone numbers while you are playing the game. A pirated hacked game.
Geez when I was young we had real virusses. They infected your machine and the simple act of sharing a floppy would make you catch it. Removing it was hell as any program installed would be infected as well
Symbian OS could use built-in protection (Score:4, Insightful)
It would prevent this sort of unfortunate situation from happening, because, who knows, the next piece of malware like this might install itsself to run all the time and pump out calls or messages, disable uninstallation or wreak any other sort of havoc.
Of course, in the end it all boils down to the end user's stupidity in installing and running untrusted programs, but a safety measure like this would be a good "last chance" before any actual monetary damage is done.
Remember the Pakistani Brain? (Score:4, Interesting)
Is there any question who to sue? Any use of malware for copy protection is unjustified and clearly in violation of the law in most places. This kind of crap has been tried before and it never benefits anyone.
Correction to story posted at The Register (Score:3, Informative)
Fingers pointing - wrong direction (Score:3, Interesting)
Re:so who do i sue ? (Score:3, Insightful)
Re:so who do i sue ? (Score:5, Insightful)
Re:so who do i sue ? (Score:3, Interesting)
Re:Bring on the Symbian/Sybian jokes (Score:5, Funny)