Malware type: Symbian

Aliases: Trojan.SymbOS.Cardtrap.a (Kaspersky), SymbOS/MultiDropper.b!sis (McAfee), SymbOS.Cardtrp.A (Symantec), SYMBOS/Cardtrp.A (Avira), Troj/Cardtrp-A (Sophos),

In the wild: Yes

Destructive: Yes

Language: English

Platform: Symbian OS Series 60

Encrypted: No

Description: 

This Symbian malware affects mobile devices running on Symbian operating system with the Series 60 Platform user interface. Some of the affected phone models are the following:

• Nokia 3600
• Nokia 3620
• Nokia 3650
• Nokia 3660
• Nokia 6600
• Nokia 6620
• Nokia 7610
• Nokia 7650
• Nokia N-Gage
• Panasonic X700
• Sendo X
• Siemens SX1

Upon installation, this malware drops several files in the affected mobile device's memory card. These files include the following malware:

• BKDR_BERBEW.A
• SYMBOS_CABIR.A
• WORM_WUKILL.B

It also overwrites normal applications installed on the affected mobile device with malformed copies, thus preventing the said applications from working properly.

Moreover, this malware drops an autorun file in the affected memory card, which attempts to execute BKDR_BERBEW.A on a system once the card is inserted into it. Thus, this malware not only affects mobile devices, it is also capable of compromising target machines.

For additional information about this threat, see:
Solution
Technical Details

Description created: Sep. 21, 2005 12:50:20 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.