Mabir.A Virus Targets Symbian Phones

adennis writes "Exploiting bluetooth and weaknesses in the OS, the Mabir.A virus, like its predecessor, targets the version of the Symbian operating system running on Nokia Series 60 handsets. Since Symbian is the dominant smartphone OS, found on phones made by Motorola, Siemens, Sony Ericsson Panasonic and Nokia, this virus could have great impact. Will mobile OS companies, like desktop OS makers, have to start an automatic update system, or will the OS creators have to start making their software secure?"

Repeat after me...

[jcostom]

I will turn off bluetooth or set my phone's visibility to off.

I will turn off bluetooth or set my phone's visibility to off.

I will turn off bluetooth or set my phone's visibility to off.

There, was that so hard? If for some reason, you refuse to do that, don't accept files from other devices unless you specifically know they're ok. You know, just like you do with your email.

Not much threat?

[Richie1984]

I had to read quite a way down TFA before I actually came to the information detailing what the virus actually does.

"At this point, mobile viruses are more of an irritant than a serious security...the messages that Mabir sends do not contain any text message, only the info.sis file.

So it seems this virus is more of a proof that they can be spread via phones, which we already knew, rather than an attempt to actually damage or corrupt the OS. Hopefully it'lll persuade manufacturers to work more on their phone security, rather than obvious new features for the user.

Exploiting Bluetooth?

[gonzo-wireless]

Saying that this virus exploits Bluetooth is similar to saying that a windows virus exploits CAT5. The software running on the phone is vulnerable, not the transmission medium.

Re:Vulnerability

[Anonymous Coward]

If you are referring to the iSync mrouter exploit it was patched within a week after release.

Re:Mabir.A ?

[soniCron88]

A little dated, but:
What's In a Name? [pcworld.com]

Make secure

[fozzmeister]

The evil empire (MS) would have done this ages ago (yes they'd still be bugs that would let things thru, but it'd be better) if it wasn't for programs assuming they can write anywhere etc. MS trapped themselves. With phones being so young, and also being a new product every version (the OS dependencies are small), it'd be hard for them to excuse there being security problems.

But auto update would also be needed, no software is perfect.

Re:Worms

[PhilHibbs]

http://dictionary.reference.com/search?q=worm [reference.com], usage 2.

Re:Remember when viruses were cool?

[Ilgaz]

For people that doesn't get what you talk about, here is my favorite DOS.

http://www.f-secure.com/v-descs/goldbug.shtml [f-secure.com]

Respect, really :)

You should be glad the elite ones like below:
http://www.f-secure.com/v-descs/hybris.shtml [f-secure.com]

Was killed by their author I suppose.

Re:Another FUD from F-Secure

[Ilgaz]

You blame F-Secure, makers of F-prot distributing FUD?

How old are you? 16?

Read some IT history about F-Prot. You will understand they really don't care about your $something.

I am just afraid of people like you administering Symbian sites, really afraid.

If I ever buy f-prot for my mobile, if there will be a reason ever, it will be people like you.

How many users of you care about exact 3 warnings when they download/purchase any sis from your site?

For people never used Symbian, you must PAY to Symbian/Nokia as a developer (free or not!) to get a "security signature" for your application.

I'd expect something like "This is what Nokia deserved, they tried to rip off developers by Symbian security signature and entire community 'learned' not to care about security alerts"

Not some bs like F-secure cares about your money.

I just wonder how many threats Karpersky labs does found and not announcing because of people like you. Who are them? Oh, just another crooks, going for money!

(fud my ass in fact)

[Ilgaz]

The symbian community learned to bypass all security alerts saying "yes, yes".

You know the reason? Even the best symbian coders have to instruct users to IGNORE security alerts because they can't afford to buy a Symbian signed license for their application.

Only being a user, I suppose Nokia wants money for it.

About your OT: Got no spam for 3 weeks, looks like even spammers have some kind of brain ;)