Worms strike back - Marib.A

[Apocalypso]

05 April 2005

New Smartphone Worm Spreads Via MMS, Bluetooth

NAME: Mabir.A
ALIAS: SymbOS/Mabir.A

Mabir is a worm that operates on Symbian Series 60 devices, the Mabir worm is capable of spreading both over Bluetooth and MMS messages.

When Mabir.A infects a phone it will start searching other phones that in can reach over Bluetooth and send infected SIS files to the phones it finds.

The SIS files that files that Mabir.A sends have always the same file name "caribe.sis". Please note that while Mabir.A uses the name SIS file name as original Cabir worms, it is different worm than Ca...

Read more:
New Smartphone Worm: Mabir.A - full story:

[Cykke]

It's one nice malware sample...

They are evolving very fast

[Apocalypso]

It's one nice malware sample...

Yes it is

[McNokia]

The Bluetooth part (Cabir) seems to be not so effective compared to some other variants.
I bet it won't infect many phones via MMS either. Opening an attachment requires many steps and finally you end up installing something called
"Caribe"... Looks like yet another proof of concept to me.