Create an Account
username: password:
 
  MemeStreams Logo

MemeStreams Discussion

search


This page contains all of the posts and discussion on MemeStreams referencing the following web page: Symantec Security Response - EPOC.Cabir. You can find discussions on MemeStreams as you surf the web, even if you aren't a MemeStreams member, using the Threads Bookmarklet.

Symantec Security Response - EPOC.Cabir
by k at 10:44 am EDT, Jun 15, 2004

] EPOC.Cabir is a proof-of-concept worm that replicates on
] Nokia Series 60 phones. It repeatedly sends itself to the
] first Bluetooth-enabled device that it can find,
] regardless of the type of device (ie even a
] Bluetooth-enabled printer will be attacked if it is
] within range).

[ This one seems pretty passive, but I suspect the next ones will not be... -k]


Symantec Security Response - EPOC.Cabir
by Acidus at 11:37 am EDT, Jun 15, 2004

] The worm spreads as a .SIS file, which is automatically
] installed into the "APPS" directory when the receiver
] accepts the transmission. Upon execution, it will display
] a message then copy itself to a directory that is not
] visible by default. The worm runs from this directory
] whenever the phone is rebooted, so it continues to work
] even if the files are deleted from the APPS directory.
]
] Once the worm is running, it will constantly search for
] Bluetooth-enabled devices, and send itself to the first
] device that it finds. There is no payload, apart from the
] vastly shortened battery life caused by the constant
] scanning for Bluetooth-enabled devices.

Excellent! Yeah yeah, Viruses suck, but I do admire the skill it takes to create one (especially on a totally new platform).


Symantec Security Response - EPOC.Cabir
by Rattle at 7:33 pm EDT, Jun 15, 2004

] EPOC.Cabir is a proof-of-concept worm that replicates on
] Nokia Series 60 phones. This worm repeatedly sends itself
] to the first Bluetooth-enabled device that it can find,
] regardless of the type of device. For example, even a
] Bluetooth-enabled printer will be attacked if it is
] within range.
]
] The worm spreads as a .SIS file, which is automatically
] installed into the APPS directory when the receiver
] accepts the transmission.

This one effects my phone. According to this, you have to accept the connection to be infected.


 
 
Powered By Industrial Memetics