Malware menaces mobiles

Johannesburg, 02 Apr 2008

Malware mongers are targeting mobile phones in a big way, says Panda sub-Saharan head Jeremy Matthews.

He adds the volume of malicious software aimed at mobile phones has become statistically relevant. "The main threats to these devices are specially adapted worms, Trojans and spyware such as 'spyphone'.

"Their behaviour and features are similar to those of malicious codes for computers," explains Matthews. "Trojans designed to steal confidential data like e-mail passwords, instant messaging contacts and the like are the most prevalent, with 54.48% of all infections."

Other malware causes phones to send SMSes to premium numbers, a new form of theft that dips into cellphone owners' pockets by running up their bills or exhausting their credit.

Mobile malware usually affects phones in one of five ways:

* Malfunction: cellphone blocking
* Loss of productivity: battery consumption
* Unnecessary costs: sending of SMSes to premium numbers
* Loss of data and information: deletion of folders and messages
* Theft of confidential information: phone numbers, SMS or other sensitive data that could be stored in the device

Trojans, adware, worms

Matthews says PC users may have noted an increase in adware in the first quarter of 2008. He says adware made up 28.6% of all malware tracked by Panda in the first three months of the year.

"Besides being annoying, many variants can compromise the computer's security or performance, so users should take precautions," says Matthews.

Trojans, with 25.5% of all infections - and worms, with 9.9% - were the other most prevalent malicious codes.

With respect to new strains that have appeared over the last three months, 62.2% were Trojans, 20.3% were adware and 8.9% were worms.

"The huge amount of new Trojans put in circulation every month indicates cyber-criminals are interested in creating new strains more frequently. This makes detection more and more difficult for conventional anti-virus solutions, which will be unable to update signature files in time. This means users are left unprotected," says Matthews.

As for the most active viruses in the first quarter of 2008, the list is headed by the Comet adware. In second place is NaviPromo, another adware, and third is the Bagle.HX worm, designed to spread and infect as many PCs as possible.