spot the threat. prevent the exploit.

vectorblog  about  contact

 

 

 

 

 

 

 

 


Cabir

infectionvectors.com

June 2004

 

Infection Vector:            Bluetooth-enabled cell phones (Nokia Series 60) without AV

 

Impact:                       None (not yet found in wild) - Minimal (annoyance)

 

Cabir is an interesting worm as it is the first to spread among Bluetooth devices, specifically the Nokia series 60 phones running the EPOC OS (Symbian). Detected June 14, 2004, this worm travels from one Bluetooth-enabled EPOC device to another by actively scanning until a unit is found.

 

Infection occurs when a device is found, a message is sent to the target hardware, and the user accepts installation. Once this is satisfied, the Caribe files are dropped into the Apps directory of the OS, and the virus is launched. Beyond a message that appears on the display and the scanning for another victim device, there is no payload to the worm.

 

Additional Information:

 

Bluetooth

http://www.bluetooth.com/

 

EPOC

http://www.symbian.com

 

Caribe

http://www.f-secure.com/news/items/news_2004061500.shtml

 

There are now antivirus packages for these devices, one of which is F-Secure’s product:

http://www.f-secure.com/

 

 

Copyright Ó 2004 infectionvectors.com. All rights reserved.