A mobile virus is a piece of malicious software that targets mobile phones or wireless-enabled PDAs. As wireless phone and PDA networks become more present and more complex, it has become increasingly difficult to secure them against electronic attacks in the form of viruses or other malware.
Typology
Two types of malicious programs are known to affect mobile devices:
- Worm: usually transmitted via text messages SMS or MMS, and do not require user interaction for execution. This type of malware's main objective is to reproduce and spread to other devices, so it can be copied endlessly to destroy the operating system of the mobile device. They may also contain harmful and misleading instructions.
- Trojan: usually appears in format executable or applications downloaded in the device, seemingly harmless and attractive to the user to be executed by it. When activated, the part of malware starts and can generate a lot of damage from the infection and deactivation of other applications itself phone leaving it unusable until the usurpation data (spyware) syncing with calendars, email accounts, notes and any other source of information before being sent to a remote server. In this type of malware, the user interaction is essential for the activation of the virus.
History
The first instance of a mobile virus occurred in June 2004 when it was discovered that a company called Ojam had engineered an anti-piracy Trojan virus in older versions of their mobile phone game Mosquito. This virus sent SMS text messages to the company without the user's knowledge. This virus was removed from more recent versions of the game; however it still exists in older, unlicensed versions. These older versions may still be distributed on file-sharing networks and free software download web sites.
In July 2004, computer hobbyists released a proof-of-concept mobile virus named Cabir. This virus replicates itself on Bluetooth wireless networks.[1]
In March 2005, it was reported that a computer worm called Commwarrior-A had been infecting Symbian series 60 mobile phones. This specific worm replicates itself through the phone's Multimedia Messaging System (MMS). It sends copies of itself to other phone owners listed in the phone user's address book. Although the worm is not considered harmful, experts agree that it heralds a new age of electronic attacks on mobile phones.
In August 2010, Kaspersky Lab reported the first malicious program affecting smartphones running on Google’s Android operating system, a trojan designated Trojan-SMS.AndroidOS.FakePlayer.a. It has already infected a number of mobile devices.[2] [3]It sends SMS messages to premium rate numbers without the owner’s knowledge or consent which can rake up huge bills.
Currently, various antivirus software companies like Trend Micro, AVG, avast!, Kaspersky Lab or Softwin are working to adapt their programs to mobile operating systems most at risk, while operating system developers curb the spread of infections with quality control checks on software and content offered through their digital application distribution platforms, such as Google Play or Apple's App Store.
Notable mobile viruses, trojans, and worms
- Cabir: Infects mobile phones running on Symbian OS. When a phone is infected, the message 'Caribe' is displayed on the phone's display and is displayed every time the phone is turned on. The worm then attempts to spread to other phones in the area using wireless Bluetooth signals.
- Duts: This parasitic file infector virus is the first known virus for the PocketPC platform. It attempts to infect all EXE files in the current directory (infects files that are bigger than 4096 bytes).
- Skulls: A trojan horse piece of code. Once downloaded, the virus, called Skulls, replaces all phone desktop icons with images of a skull. It also will render all phone applications, including SMSes and MMSes useless.
- Commwarrior: First worm to use MMS messages in order to spread to other devices. Can spread through Bluetooth as well. It infects devices running under OS Symbian Series 60. The executable worm file, once launched, hunts for accessible Bluetooth devices and sends the infected files under a random name to various devices.
- Gingermaster: trojan developed for Android platform that propagates by installing applications that incorporate a hidden malware for installation in background. Exploit the frailty from the version Gingerbread (2.3) of operating system to use super-user permissions by privilege escalation. Then create a service that steals information from infected terminal (user ID, number SIM, phone number, IMEI, IMSI, screen resolution and local time) by sending the same to a remote server through petitions HTTP.
- DroidKungFu: trojan content in Android applications, which when executed, obtains privileges root and install the file com.google. ssearch.apk, which contains a backdoor that allows removing files, open home pages supplied, open web and download and install application packages. This virus collected and sent to a remote server all available data on the terminal.
- Ikee: first worm known for platforms iOS. Only works on terminals that were previously made a process of jailbreak, and spreads trying to access other devices using protocol SSH, first through the subnet that is connected to the device. Then, repeat the process generating a random range and finally used some preset
ranges corresponding to IP address of certain telephone companies. Once infected the computer, replace the wallpaper to a photograph of the singer Rick Astley.
See also
References
- ^ Malware Goes Mobile, Mikko Hypponen, Scientific American, November 2006, pp. 70-77.
- ^ "First SMS Trojan detected for smartphones running Android". Kaspersky Lab. http://www.kaspersky.com/about/news/v irus/2010/First_SMS_Trojan_detected_f or_smartphones_running_Android. Retrieved 2010-10-18.
- ^ "Information about Smartphone Virus and Prevention tips". MyPhoneFactor.in. http://myphonefactor.in/2013/01/infor mation-about-smartphone-virus-and-pre vention-tips/. Retrieved 2013-01-12.
External links
|
|---|
| | | Infectious malware | |
|---|
| | | Concealment | |
|---|
| | | Malware for profit | |
|---|
| | | By operating system | |
|---|
| | | Protection | |
|---|
| | | Countermeasures | |
|---|
|
