424 Cellular Virus Attack

8/2/2019 424 Cellular Virus Attack

1/15

CELLULAR VIRUS ATTACKCELLULAR VIRUS ATTACK

ATechnical Seminar Report OnCellular Virus Attack

BY

NARESH .B

Under Guidance ofMr.G.VENU


2/15


A computer program that is designed to replicate

itself by copying itself into the other programsstored in a computer. It may be benign or have anegative effect, such as causing a program tooperate incorrectly or corrupting a computer's

memory.

Virus, What is it ?


3/15


MOBILE VIRUS:-

The viruses for WAP-enabled mobile devicesare the mobile virus.

CELL PHONE VIRUS:-

Viruses that can attack WAP-enabled

Cell phones


4/15


WAP SECUIRITY PROBLEM:-

WAP gateway securityOperating systemUse of SMS


5/15


WAP INFRASTRUCTURE


6/15


Motive to create virus:-

Viruses are written for a variety of reasons

curiosityChallengeto gain wider attention

some antivirus companies want to enternew market


7/15


Virus Actions:-

Send SMS text messages to all thenumbers found within cell phone

damage by deleting or modifying thephone book

starting to make phone calls to pay-per-minute numbers


8/15


CURRENT THREAT:-

CABIR

Symb/Cabir-A is a virus writtenspecifically for N-Gage, 3650, orother Nokia Series 60 mobile phonesrunning in the Symbian operating

system. The virus spreads as a .sispackage, named as Caribe.sis


9/15


Cabir requires:-

approving connection from unknowndevice

approving receiving a file from unknowndevice

approving receiving a application fromunknown device


10/15


Reason to create cabir:-

There are two reasons behind Cabir creators:

some antivirus companies want to enter new

market.

May be Microsoft wants to show how insecureSymbian OS is compared to their MS Smart phone


11/15


Working function of cabir:-

When launched, the worm displays a message on thescreen: either 'Caribe' or 'Caribe - VZ/29a' . wormitself is an SIS format file, called caribe.sis, of 15092

or 15104 bytes in size . This file contains threeobjects:

caribe.app: 11932 / 11944 bytes in sizeflo.mdl: 2544 bytes in sizecaribe.rsc: 44 bytes in size


12/15


The worm installs the three file to the followingdirectories

:\system\apps\caribe\caribe.app:\system\apps\caribe\flo.mdl:\system\apps\caribe\caribe.rsc


13/15


GET RID OF THIS VIRUS:-

The directory SYMBIANSECUREDATA which theworm creates is hidden and cannot be seen by the userof the infected telephone. Fexplorer isused todelete those hidden files.

C:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.SISC:\SYSTEM\SYMBIANSECUREDATA\CARIBE

SECURITYMANAGER\ CARIBE.APPC:\SYSTEM\SYMBIANSECUREDATA\CARIBESECURITYMANAGER\ CARIBE.RSCC:\SYSTEM\RECOGS\FLO.MDL


14/15


CONCLUSION:-

. There are so many antivirus applications forSeries 60 are already available in market.

We should not accept files from unknownpeople without confirmation .


15/15


424 Cellular Virus Attack

Documents

Transcript of 424 Cellular Virus Attack