F-Secure, a Finnish cyber security firm whose name has nothing to do with expletives, is reporting on an annoying virus that does not affect the Windows operating system. Some phones running the Symbian OS are the target this time. Commwarrior is your typical trojan spread through mail ?? MMS (Multimedia Messaging Service) in this case ?? but also, like the Cabir virus, will propagate over a Bluetooth connection.
The message wrapper contains a SIS (Symbian OS installer) file which, if unwittingly installed on a Symbian Series 60 phone, will automatically execute Commwarrior. Commwarrior will then, like a Cossack (the virus appears to originate in Russia), plunder the contact list, sending messages containing the SIS file to every number in the address book. Further, every Bluetooth phone that is foolishly discoverable and in range will also receive a tainted message which may include text such as:
Official Symbian desctop manager.
Matrix has you. Remove Matrix!
3DGame from me. It is FREE!
Happy Birthday! It is present for you!
Virtual SEX mobile engine from Russian hackers!
Again, only Symbian Series 60 phones are at risk, and it is important to remember that Commwarrior is a relatively harmless proof of concept virus, though if people are paying per MMS message the cost may not be so harmless. Finally, it is possible the author may consider their efforts to be something of a PSA for educating the unwary, as the text message hidden in the worm is:
CommWarrior v1.0 (c) 2005 by e10d0r ATMOS03KAMA HEAT!
You have to love the copyright notice, and "ATMOS03KAMA HEAT!" is l33t Russian that roughly translates as "no to braindeads!" Those in need of escaping the Matrix or returning birthday presents can find further information on removing Commwarrior, or purchasing anti-virus software for their phone, at their local virtual AV provider. However, the best protection is, as always, constant vigilance, as well as a few simple rules for Bluetooth.
