Skulls Trojan poses as security code
Menacing mobile malware
Posted in Mobile, 13th June 2005 13:25 GMT
Free webcast: Service level monitoring and management
Virus writers have created mobile phone malware that poses as a pirated copy of F-Secure's mobile anti-virus software. Skulls-L is a minor modification of the Skulls-C Trojan. Only the names have altered to leave the innocent at risk: Skulls-L unlike Skulls shares the same name as F-Secure's mobile anti-virus installation package, and the Trojan shows dialog text "F-Secure Antivirus protect you against the virus. And don`t forget to update this!"
Both viruses are capable of disabling the smartphone features of infected Symbian mobiles by deactivating messaging, net access and other apps. The malware replaces application icons with a picture of a skull, hence its name. F-Secure's mobile anti-virus is signed by Symbian - unlike Skulls Trojans - and the warning about missing installation package signatures should be a dead giveaway. Anecdotal evidence, however, suggests people get infected because they get fed up of saying "no" all the time little realising that if they got out of range of an infected device or turned off their phone they'd be quite safe.
F-Secure advises users to avoid downloading F-Secure anti-virus files from anywhere but its own server or the short link phoneav.com, which leads to the same site. ®
Related stories
Skulls Trojan keelhauls Symbian phones
Double trouble from Symbian virus
Users untouched by mobile viruses despite hype

Analyst Keynote: The Register Agile Data Center Summit
SMB phone systems product requirements worksheet
Enabling The Agile Data Center
Checklist: signs you need to upgrade your business phone system

Dirty, dirty PCs: The X-rated picture guide
Top 500 supers - rise of the Linux quad-cores
Early adopters bloodied by Ubuntu's Karmic Koala
Sign up, sign up for The Register IT security newsletter