Synopsis:
Commwarrior is a Symbian Series 60 worm that has the following malicious effects:
1. Once installed, Commwarrior will search for nearby Bluetooth devices in "Discoverable Mode" and attempt to send itself to such devices. Commwarrior renames itself randomly so avoiding known "malicious file names" is not possible. Unlike Cabir which locks onto a single device, Commwarrior can continuously attempt to infect devices it finds so it can spread to all devices in range.
2. Commwarrior will also search through the infected device's phonebook and begin sending MMS messages infected with copies of itself (commw.sis) to phone numbers found in the phonebook.
|
| |
|
|
| |
|
|
These are some of the MMS texts Commwarrior uses to try and receive permission to be installed:
3DGame
3DGame from me. It is FREE !
3DNow!
3DNow!(tm) mobile emulator for *GAMES*.
Audio driver
Live3D driver with polyphonic virtual speakers!
CheckDisk
*FREE* CheckDisk for SymbianOS released!MobiComm
Desktop manager
Official Symbian desctop manager.
Display driver
Real True Color mobile display driver!
Dr.Web
New Dr.Web antivirus for Symbian OS. Try it!
Free SEX!
Free *SEX* software for you!
Happy Birthday!
Happy Birthday! It is present for you!
Internet Accelerator
Internet accelerator, SSL security update #7.
Internet Cracker
It is *EASY* to *CRACK* provider accounts!
MatrixRemover
Matrix has you. Remove matrix!
MS-DOS
MS-DOS emulator for SymbvianOS. Nokia series 60 only. Try it!
Nokia ringtoner
Nokia RingtoneManager for all models.
Norton AntiVirus
Released now for mobile, install it!
PocketPCemu
PocketPC *REAL* emulator for Symbvian OS! Nokia only.
Porno images
Porno images collection with nice viewer!
PowerSave Inspector
Save you battery and *MONEY*!
Security update #12
Significant security update. See www.symbian.com
Symbian security update
See security news at www.symbian.com
SymbianOS update
OS service pack #1 from Symbian inc.
Virtual SEX
Virtual SEX mobile engine from Russian hackers!
WWW Cracker
Helps to *CRACK* WWW sites like hotmail.com
It is interesting to note Commwarrior will only attempt to send infected MMS between 00:00 to 06:59 based on the infected device's clock. Apparently this is to minimizes the chance the owner of the infected device from finding out since he/she is most likely asleep.
|
Write Up: David P. 5.10.2006 |
