CDRInfo Forum CDRInfo Forum

Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List  Log Out

McAfee Warns of Windows Mobile Trojan   Logged in as: Guest
Viewers: 1307 You can click here to see Today's Posts | Most Active Topics | Posts Since Last Visit
  Printable Version
All Forums >> [News Around The Web] >> Security News >> McAfee Warns of Windows Mobile Trojan Page: [1]
Login
Message << Older Topic   Newer Topic >>
McAfee Warns of Windows Mobile Trojan - 2/27/2008 2:04:32 PM   
cadoo


Posts: 6810
Joined: 8/1/2006
From: Serbia
Status: offline
A Window Mobile PocketPC trojan that disables Windows Mobile application installation security has been discovered in China.

WinCE/InfoJack sends the infected device?s serial number, operating system and other information to the author of the trojan, according to McAffee. It also leaves the infected mobile device vulnerable by allowing silent installation of malware. The trojan modifies the infected device?s security setting to allow unsigned applications to be installed without a warning.

The trojan was packed inside a number of legitimate installation files and distributed widely. It has been distributed with Google Maps, applications for stock trading, and a collection of games.

WinCE/InfoJack was created by a specific website. The website may have hired someone to create the trojan and distribute it to other sites. The maintainer of the website claims that the software was just necessary to collect information on the types of mobiles used to access their site. That would be easier to believe if they had notified the user prior to installation or if they had provided some sort of uninstallation method.

WinCE/InfoJack installs silently along with other applications. WinCE/InfoJack has a number of features that show its malicious intent:

- installing as an autorun program on the memory card
- installing itself to the phone when an infected memory card is inserted
- protecting itself from deletion, copying itself back to disk
- replaces the browser?s home page
- allows unsigned applications to install without warning

WinCE/InfoJack installs as an autorun program on the memory card. That last feature, allowing silent installation of an unsigned app, is used by WinCE/InfoJack to auto update itself. It also leaves the mobile open to other malware being installed silently. Fortunately the trojan?s website is no longer reachable, due in part to an investigation by local law enforcement.


_____________________________


http://www.cdrinfo.com/
Post #: 1
Page:   [1]
All Forums >> [News Around The Web] >> Security News >> McAfee Warns of Windows Mobile Trojan Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.063