Windows Mobile trojan in the wild - InfoJack Trojan
The InfoJack Trojan infects your Windows Mobile device when an unsuspecting user downloads and installs an infected application, or uses an infected memory card. The trojan disables Windows Mobile's installation security by allowing unsigned applications to be installed. This leaves the smartphone vulnerable to future infections. Further, the trojan sends sensitive information back to the malware's author - it jacks your info, hence the name. The InfoJack Trojan also copies itself back into memory and the memory card, so that even if the active trojan is deleted, there's a backup copy somewhere else.
InfoJack Trojan has been circulated through Chinese downloads of Google Maps, applications for stock trading, and games. The website that originated the InfoJack Trojan has been shut down, thanks to Chinese authorities, but that doesn't mean Windows Mobile users are in the clear.
Now might be a good time to start thinking about anti-virus applications for your Windows Mobile device.
[Via: Register]
Labels: Security
First Trojan reported for the iPhone
While not a huge risk, the first Trojan for the iPhone has been discovered. The first reports came from iPhone enthusiast site Modmyifone.com and were later confirmed by security research company F-Secure.The Trojan specifically targets users that have modded their iPhone so they can install third-party applications. The application masks itself as an update to Erica’s Utilities and is labeled as “113 prep.”
According to Modmyifone.com all the app does is say “shoes.” However, when uninstalled, the application removes files from the /bin directory on the iPhone, breaking valid apps like Sendfile and Erica’s Utilities.
The Web site hosting the application was taken offline soon after it was discovered, reports F-Secure.
“Hopefully this serves as a warning for those who have opened their iPhones using a security hole in the system and then installing unverified software without a second thought to what they are doing,” said F-Secure on its Web site.
F-Secure reported that it was an 11-year-old kid playing with XML files who created the Trojan. “Next time it might be someone else with more skills and with specific target,” they said.