Pojavio se prvi J2ME (java platforma) virus. Program se zove "redbrowser.jar" i veličina bi trebalo da mu bude oko 54 KB. Pazite šta skidate!!!

Za više informacija pogledajte ovde.

hvala za upozorenje !

@Recka kad već želiš da objaviš nešto što onda lepo ne odeš do "izvora" informacije?!?
Sada je glupo da otvaram novu temu, samim tim ću lepo malo preimenovati tvoju i dodati par informacija!

Redbrowser.A trojan detected

Helsinki, Finland - February 28, 2006

Redbrowser.A is a J2ME based Java Midlet that sends SMS messages to premium rate numbers. It affects all devices that support java sms -functionality.

Redbrowser.A pretends to be a WAP browser that offers free WAP browsing using free SMS messages to send the WAP page contents. Actually Redbrowser.A sends SMS messages to expensive numbers, causing an increased phone bill to the user. Redbrowser.A contains a fixed list of ten phone numbers to which it sends the SMS messages. After Redbrowser.A has shown the texts, it picks a random number from the list and sends an SMS message to it.

Redbrowser.A claims to be sending free SMS messages as part of it's normal operation to fool the user to allow the application to use Java SMS capabilities in phones which require user acceptance before sending SMS messages.

The texts in Redbrowser.A are written in Russian, which limits it's spreading.

F-Secure Mobile Anti-Virus is capable of detecting Redbrowser.A



Izvor: F-Secure

Trojan targets mobiles phones running Java applications

Kaspersky Lab, a leading developer of secure content management solutions that protect against viruses, Trojans, worms, spyware, hacker attacks and spam, has detected a new piece of mobile malware. Trojan-SMS.J2ME.RedBrowser.a is the first malicious program which infects not only smartphones, but any mobile phone capable of running Java (J2ME) applications.



The Trojan spreads in the guise of a program called "RedBrowser", which allegedly enables the user to visit WAP sites without using a WAP connection. According to the Trojan's author, this is made possible by sending and receiving free SMSs. In actual fact, the Trojan only sends SMSs to premium rate numbers. The user is charged $5 - $6 per SMS.

The Trojan is a Java application, a JAR format archive. The file may be called "redbrowser.jar", and is 54482 bytes in size. The Trojan can be downloaded to the victim handset either via the Internet (from a WAP site) or via Bluetooth or a personal computer. The archive contains the following files

    * FS.class - auxiliary file (2719 bytes in size)
    * FW.class - auxiliary file (2664 bytes in size)
    * icon.png - graphics file (3165 bytes in size)
    * logo101.png - graphics file (16829 bytes in size)
    * logo128.pnh - graphics file (27375 bytes in size)
    * M.class - interface file (5339 bytes in size)
    * SM.class - Trojan application which sends SMS messages (1945 bytes in size)

The Trojan can be easily removed from the victim handset using standard utilities already installed on the telephone.

So far, Kaspersky Lab has only received one sample of RedBrowser, which clearly targets subscribers of Beeline, MTS, and Megafon, Russia's major mobile service providers. However, other versions of RedBrowser, or similar programs, may well be circulating on the Internet. RedBrowser is a sign that virus writers are extending their reach, and no longer only targeting smart phones.

Mobile phone users are recommended to be cautious and not to download or launch unknown programs via the Internet.



Izvor: Kaspersky Lab

Što bi se reklo, ajd sad da vidim ove fancy likove koji tvrde da njihovi Java ljubimci vrede više od symbian aparata jer nemaju virusa?!?
Pazi 'vamo: jedan poslati SMS "samo" 4 evra!

ima li neko ovo cudo
ako ima nek postavi
radi kolekcije   

uu mighty mile, da da , radi kolekcije.. mozhda ti i postave
ali ne verujem da iko ima ovo , relativno je novo ...

E vidi ga mali bući, bući, bući....Moram da ga nabavim!!

Prvi trojanac za klasične mobitele
   

Antivirusni stručnjaci ruske kompanije Kaspersky Lab upozoravaju korisnike da je primijećena pojava prvog trojana koji može zaraziti bilo koji mobitel s ugrađenom Java platformom

Kaspersky Lab trojanca naziva RedBrowser, a zloćudna aplikacija pretvara se da je program koji omogućuje korisnicima pristup internetu putem tekstualnih poruka, bez klasičnog povezivanja.

Nakon što zarazi mobitel, umjesto da korisnicima omogući jeftin i jednostavan pristup internetu, trojan šalje SMS poruke na određeni broj mobitela, a svaka poruka korisnicima se naplaćuje između pet i šest dolara. Zasad je ova zloćudna aplikacija primijećena samo na pojedinim ruskim GSM mrežama, no vjerojatno je samo pitanje dana kada će se proširiti i na druge mreže.

Dosad su određene zloćudne aplikacije ovakvoga tipa bile primijećene isključivo na smartphone mobitelima, no RedBrowser može zaraziti bilo koji mobitel koji podržava pokretanje Java aplikacije. Korisnik može zaraziti svoj mobitel ako učita aplikaciju koja se krije pod nazivom redbrowser.jar, s interneta ili je preuzme od drugog korisnika Bluetooth ili PC vezom.

Zasad RedBrowser ne predstavlja neku veliku opasnost i namijenjen je isključivo ruskom tržištu, no predstavlja jasan dokaz da zlonamjernici svoje 'poslovanje' šire i na ostala tržišta. Kaspersky Lab upozorava korisnike da s interneta ne učitavaju niti pokreću nepoznate aplikacije na svojim mobitelima.

www.kasperskylab.nl/en/index.shtml
B.R.
srijeda, 01.03.2006.
   

Izvor: Tportal