Windows Mobile Trojan Spotted in the Wild

Posted on Wednesday, Feb 27, 2008 by Dieter Bohn
 
Filed Under: Software; Tags: virus, trojan, spyware, malware

This is the offending suite of games.

This is the first “in the wild” Windows Mobile malware I can remember off the top of my head. It was discovered in China and written up over at McAfee. Basically if you downloaded a games pack (including Google Maps in that pack) from a certain Chinese website it installed a piece of software that did the following:

  • Silently makes your smartphone accept unsigned applications
  • Installs a hidden, difficult to remove program that sends your personal information back to home base
  • Installs a copy of the malware on your memory card for further spreading.

The site has since been shut down (despite protests from the developer that he didn't mean to do anything evil). It's a bummer, though, I am not keen on installing anti-virus on my smartphone.

The InfoJack Trojan spreads by either tricking mobile users into installing seemingly legitimate application installation files or if punters inadvertently use an infected memory card on vulnerable devices. The malware has been spotted circulating in China. - Register

Anybody running anti-virus / anti-spyware on their smartphones? How's your performance?

 
 

Comments

I tried all the various anti-virus programs on my Dell PDA with 624mHz processor before. None of them stayed since they all made such a big hit on performance. No experience on WM phones though. But I'd imagine the performance hit would be even more noticeable.

InfoJack doesn't concern me that much since I only install programs from highly trusted sources but I do believe it changes the playing field. I hope this is an anomaly.
Whoa - if it hurts an Axim with a proc like that, I want nothing to do with antivirus on a smartphone.

I agree that this isn't *that* big a deal -- just the first time that I can recall one actually getting out into the wild.
I'm running Spybot S&D mobile edition. It doesn't seem to affect performance too much, but then it's not constantly running either. My only concern with it is that it's not updated nearly as often as the PC version.
I hadn't been to worried about this because it is so easy to hard reset and restore but I guess they can get to your handheld unblocked then jump to the desktop via sync...... Man i hate to see this. I tried spybot last year on my 6700 and it reduced performance by half :(

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img>
  • Lines and paragraphs break automatically.

More information about formatting options

temp ad

software ad

Smartphone Round Robin

New in the Forums

Follow WMExperts

 

Subscribe via RSS
   

Add to Google Reader or Homepage


What is RSS?

Subscribe to the WMExperts Store Newsletter: