Thursday, February 19, 2009

Is there a Mobile Botnet in Our Future?

What is now the second piece of mobile malware to hit the scene in 2009, the SymbOS/Yxes.A! worm is under investigation by anti-virus companies Fortinet and F-Secure. This worm has raised some suspicion that we may see our mobile devices in danger of becoming part of a zombie network sometime in the future.
This piece of malware, also known as "Sexy View" is currently targeting devices running SymbianOS 360 3rd edition (e.g. Nokia 3250), but may run on a wider range of devices according to Fortinet.
The worm will likely show up as a SMS message with a link to install the software. It carries a valid certificate from Symbian to help it appear to be a legitimate application. After it installs, it collects all of the phone numbers on the infected device and repeatedly attempts to send SMS messages to them with a URL link to a malicious website where they can infect themselves as well. In addition to this propogation technique, the worm is also gathering other information about the infected user such as the phone's serial number and subscription number which is then sent and stored on a remote computer likely to be sold to other cybercriminals who purchase harvested information. This is a new version of an old practice very similar to directory harvest attacks of the past where spam and malware campaigns would specifically collect valid email addresses with the intentions of selling those lists to marketers and spammers (thin line there).
Ok, back to the botnet part. The fact that this worm contacts and interacts with a remote server, it would theorectically be very easy for the remote server to issue commands back to the infected mobile device, combine that with the worm's aggressive propogation technique, add a pinch of malice, and you've got yourself a cell phone botnet.
As technology advances and morphs, (considering a phone used to be a phone, and nowadays they're just smaller computers that we happen to make phone calls on) so does the innovation of the bad guys. Luckily the fix is still the same as it's always been - prevention. Be smart and aware, and don't go installing random unknown software on your computers or your phones. It's never a good idea.

0 comments: