12 December 2005
Pbstealer.B and Pbstealer.C found
 |
Pbstealer in action
(10x to CALVIN for screens) |
PBStealer.B and Pbstealer.C are trojan applications that run on Symbian Series 60 platform and spread in a SIS file originally named as Pbexlorer.SIS. PBStealer.B and Pbstealer.C pretend to be utility softwares that compact the phone's contact database. Instead of compacting the information, both trojans read the contact information database and send the contents as a text file into the first bluetooth device they find.
PBStealer.B is a close variant to PBStealer.A. The main difference is that PBStealer.B copies additional contact entry fields and user's Notes and ToDo entries to the file it sends over bluetooth. Pbstealer.C is a very close variant to PBStealer.B.
PBStealer.B and Pbstealer.C are trojans which do not spread by themselves. In order to be infected, the user has to download a SIS installation package that contains the trojan. PBStealer.B and Pbstealer.C use bluetooth for sending the contact database's data. The data is pure text and cannot infect the receiving device.
F-Secure Mobile Anti-Virus is capable of detecting and deleting PBStealer.B and Pbstealer.C. Both trojans can also be removed by uninstalling them with Application Manager.
|
