Article Rating: |
||
| March 1, 2006 05:30 PM EST | Reads: |
13,791 |
Kaspersky Lab, one of the world’s leading anti-virus companies, has detected a new piece of mobile malware. Trojan-SMS.J2ME.RedBrowser.a is the first malicious program to infect not only smartphones, but any mobile phone capable of running Java (J2ME) applications.
The Trojan spreads in the guise of a program called RedBrowser, which allegedly enables the user to visit WAP sites without using a WAP connection. According to the Trojan's author, this is made possible by sending and receiving free SMSs. In reality, the Trojan sends SMSs to premium rate numbers. The user is charged $5(£2.86) - $6 (£3.44) per SMS.
The Trojan is a Java application, a JAR format archive. The file may be called "redbrowser.jar", and is 54482 bytes in size. The Trojan can be downloaded to the victim handset either via the Internet (from a WAP site) or via Bluetooth or a personal computer. The archive contains the following files:
. FS.class - auxiliary file (2719 bytes in size)
. FW.class - auxiliary file (2664 bytes in size)
. icon.png - graphics file (3165 bytes in size)
. logo101.png - graphics file (16829 bytes in size)
. logo128.pnh - graphics file (27375 bytes in size)
. M.class - interface file (5339 bytes in size)
. SM.class - Trojan application which sends SMS messages (1945 bytes in size)
The Trojan can be easily removed from the victim handset using standard utilities already installed on the telephone.
So far, Kaspersky Lab has only received one sample of RedBrowser, which targets subscribers of Beeline, MTS, and Megafon, Russia’s major mobile service providers. However, other versions of RedBrowser, or similar programs, may well be circulating on the Internet.
Kaspersky Lab recommends that mobile phone users exercise caution and do not download or launch unknown programs via the Internet.
David Emm, Senior Technology Consultant, Kaspersky Lab, comments: “This latest virus represents a natural progression for virus writers, who are constantly seeking to extend their reach by spreading infections via as many platforms as possible. One thing’s for sure – RedBrowser may be the first of its kind, but it certainly won’t be the last.”
The Trojan spreads in the guise of a program called RedBrowser, which allegedly enables the user to visit WAP sites without using a WAP connection. According to the Trojan's author, this is made possible by sending and receiving free SMSs. In reality, the Trojan sends SMSs to premium rate numbers. The user is charged $5(£2.86) - $6 (£3.44) per SMS.
The Trojan is a Java application, a JAR format archive. The file may be called "redbrowser.jar", and is 54482 bytes in size. The Trojan can be downloaded to the victim handset either via the Internet (from a WAP site) or via Bluetooth or a personal computer. The archive contains the following files:
. FS.class - auxiliary file (2719 bytes in size)
. FW.class - auxiliary file (2664 bytes in size)
. icon.png - graphics file (3165 bytes in size)
. logo101.png - graphics file (16829 bytes in size)
CIO, CTO & Developer Resources
. M.class - interface file (5339 bytes in size)
. SM.class - Trojan application which sends SMS messages (1945 bytes in size)
The Trojan can be easily removed from the victim handset using standard utilities already installed on the telephone.
So far, Kaspersky Lab has only received one sample of RedBrowser, which targets subscribers of Beeline, MTS, and Megafon, Russia’s major mobile service providers. However, other versions of RedBrowser, or similar programs, may well be circulating on the Internet.
Kaspersky Lab recommends that mobile phone users exercise caution and do not download or launch unknown programs via the Internet.
David Emm, Senior Technology Consultant, Kaspersky Lab, comments: “This latest virus represents a natural progression for virus writers, who are constantly seeking to extend their reach by spreading infections via as many platforms as possible. One thing’s for sure – RedBrowser may be the first of its kind, but it certainly won’t be the last.”
Published March 1, 2006 Reads 13,791
Copyright © 2006 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.
Most Recent Comments
![]() |
jdj news desk 03/01/06 12:30:55 AM EST | |||
Kaspersky Lab, an anti-virus company, has detected a new piece of mobile malware. Trojan-MS.J2ME.RedBrowser.a is the first malicious program to infect not only smartphones, but any mobile phone capable of running Java (J2ME) applications. The Trojan spreads in the guise of a program called RedBrowser, which allegedly enables the user to visit WAP sites without using a WAP connection. |
||||
- It's the Java vs. C++ Shootout Revisited!
- Patterns for Building High Performance Applications
- Asynchronous Logging Using Spring
- Java for Programmers (2nd Edition)
- Cross-Platform Mobile Website Development – a Tool Comparison
- Three Buzzwords That Every CIO Hears but One They Should Listen To
- Write Once Run Anywhere or Cross Platform Mobile Development Tools
- Immersing into JavaScript Frameworks
- Workday Reportedly Prepping to Go Public
- Cloud Expo New York: The Java EE 7 Platform - Developing for the Cloud
- Book Review: Sams Teach Yourself Java in 24 Hours
- OpenOffice.com Lives
- Book Excerpt: Introducing HTML5
- Adobe Sends Flex to the Apache Foundation
- Five Years Waiting for JRE 7: Is It Justified? (Part 1)
- Book Excerpt: Java Application Profiling Tips and Tricks
- i-Technology in 2012: Five Industry Predictions
- It's the Java vs. C++ Shootout Revisited!
- Patterns for Building High Performance Applications
- OpenXava 4.3: Rapid Java Web Development
- The Next Web Architecture
- Asynchronous Logging Using Spring
- Java for Programmers (2nd Edition)
- Is Write Once Run Anywhere Ever Going to Be a Reality?
- A Cup of AJAX? Nay, Just Regular Java Please
- Java Developer's Journal Exclusive: 2006 "JDJ Editors' Choice" Awards
- JavaServer Faces (JSF) vs Struts
- The i-Technology Right Stuff
- Rich Internet Applications with Adobe Flex 2 and Java
- Java vs C++ "Shootout" Revisited
- Bean-Managed Persistence Using a Proxy List
- Reporting Made Easy with JasperReports and Hibernate
- Creating a Pet Store Application with JavaServer Faces, Spring, and Hibernate
- Why Do 'Cool Kids' Choose Ruby or PHP to Build Websites Instead of Java?
- What's New in Eclipse?
- i-Technology Predictions for 2007: Where's It All Headed?



















