June 14, 2004 5:37 PM PDT
Worm ready to wriggle into smart phones
- Related Stories
-
Nokia gets hip to flip phones
June 14, 2004 -
Study: Symbian to hang on to smart phone OS lead
April 26, 2004 -
Expert: Gaps still pain Bluetooth security
April 22, 2004 -
Nokia: Bluetooth flaw gnaws at phone security
February 9, 2004
The worm program, dubbed Cabir by Russian antivirus company Kaspersky, apparently uses the Bluetooth short-range wireless feature of smart phones that run the Symbian operating system to detect other Symbian phones, and then transfers itself to the new host as a package file. While able to replicate the spread of the virus in research settings, antivirus companies have not found any evidence that the program is infecting smart phones outside of those limited test cases.
Get Up to Speed on...
Enterprise security
Get the latest headlines and
company-specific news in our
expanded GUTS section.
Antivirus companies were apparently sent a copy of the worm from the group that created it. While the program does not do anything but spread, and has not yet been detected among the public's phones, Gullotto believes that other virus writers may use the worm as a departure point for their own development.
The Symbian software dominates the smart-phone market, which remains small, representing only a thin slice of the more than 1 billion cell phones in circulation. It's expected to battle a similar product from Microsoft for the lead in the operating system market through the end of the decade. Currently, Symbian's operating system is in a majority of smart phones--devices that combine the features of cell phone and a personal digital assistant.
Hackers and researchers have repeatedly warned about problems with the security of the Bluetooth wireless standard. This worm, however, mostly takes advantage of the amount of trust the Symbian operating system invests in other Symbian-based smart phones.
After infecting a phone, the program creates an application package file containing the worm and passes it to another phone over an automatically established Bluetooth connection, according to antivirus companies. The phone that received the program installs the application, thus infecting itself.
Nokia, which took the wraps off five new phones on Monday, is in the process of buying a controlling share of Symbian, the company that licenses the operating system of the same name. Only one of the new phones runs the Symbian operating system.
CNET News.com's Ben Charny contributed to this report.
See more CNET content tagged:
Symbian Inc.,
antivirus company,
worm,
smart phone,
antivirus
M$ smart phone tech. I'll stick w/ my stupid phone that works,
without the endless patches and anti virus that plaques the
windows world.