BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 11-30-2004, 03:59 PM   #1 (permalink)
Thumbs Must Hurt
 
Join Date: Sep 2004
Location: Nassau, Bahamas
Model: Torch
Carrier: BTC
Posts: 171
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Please Login to Remove!

Offline  
Old 01-24-2005, 02:15 PM   #2 (permalink)
New Member
 
Elctpwr's Avatar
 
Join Date: Jan 2005
Location: Orlando, Fl
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Does the blackberry protect against Trojan Horse attacks?

I read this story in the internet today and I was wondering if we had a protection aside from the Firewall settings?
http://story.news.yahoo.com/news?tmp...pcworld/119392


Trojan Horses Take Aim at Mobile Phones
The programs, Gavno.a and Gavno.b, masquerade as patch files designed to trick users into downloading them, says Aaron Davidson, chief executive officer of SimWorks International.
Although almost identical with Gavno.a, Gavno.b contains the Cabir worm, which attempts to send a copy of the Trojan horse to other nearby Symbian-based phones via short-range wireless Bluetooth technology.
The Gavno Trojans, according to Davidson, are the first to aim at disrupting a core function of mobile phones--telephony--in addition to other applications such as text messaging, e-mail, and address books. "Gavno will effectively turn a mobile phone into a paperweight," he says.
Gavno.a and Gavno.b are proof-of-concept Trojan horses that "are not yet in the wild," Davidson says. "We were given an anonymous tip to have a look at them, which we've done. They're real."
Even if the Gavno Trojans aren't sophisticated programs, "they could still cause a lot of damage," Davidson says.
Gavno a., which has a size of around 2KB, comes disguised in a SIS (Symbian Installation System) file, called patch.sis. Gava.b, which is slightly larger, is tucked inside the SIS file patch_v2.sis.
Davidson believes the Trojan programs originated in Russia.
Certain Phones Affected
The programs affect phones, such as Nokia (news - web sites)'s 6600 and 7610 models, using Symbian's OS version 7 with the Series 60 graphical user interface, according to SimWorks, which is located in Auckland.
Not affected are Symbian-based phones such as the P900 and P910 from Sony Ericsson (news - web sites) Mobile Communications and the A925 and 1000 from Motorola equipped with the graphical user interface from UIQ Technology, SimWorks says. Also unaffected are Nokia's 3650 and Siemens AG (news - web sites)'s SX1, running Symbian OS version 6.x together with the Series 60 interface.
To fix infected phones, users will need to restore them to their factory settings, resulting in the loss of all personal data, such as phone book and calendar, according to Davidson.
Mobile phone antivirus experts at F-Secure have not come across the Gavno Trojan horses, nor have they received reports or questions from customers, says Mikko Hypponen, director of antivirus research at Helsinki-based F-Secure. "Even if we haven't located the malware ourselves, we do believe it is out there if SimWorks says it is," Hypponen says. "Lots of new mobile viruses, worms, and Trojan horses are emerging around the world."
In December, SimWorks detected the mobile Trojan horse, MetalGear.a. The program, which masquerades itself as a Symbian version of the Metal Gear Solid game, disables antivirus programs and also installs a version of the Cabir worm identified earlier in the year.
Offline  
Old 01-24-2005, 03:23 PM   #3 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: i5s
Carrier: AT&T
Posts: 27,798
Post Thanks: 33
Thanked 441 Times in 381 Posts
Default

Well, in this case the virus was written specifically for the Symbian operating system, which is open and has freely published APIs.

The RIM OS is fairly closed, with most of the APIs controlled directly by RIM.

I am not too worried about a worm or virus on my BB..

http://www.blackberryforums.com/viewtopic.php?t=2183

http://www.blackberryforums.com/view...php?t=489&
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.