Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
First backdoor trojan found for Windows Mobile Pocket PC
Posted on 6-Aug-2004 14:17 | Filed under: News


First backdoor trojan found for Windows Mobile Pocket PC
Not long after the first proof-of-concept Pocket PC virus was found, a real trojan program is being distributed, targeting this platform. Brador.a (or WinCE.Brador.a as defined by Symantec) is a backdoor (a utility allowing for remote administration of the infected machine) for Windows Mobile Pocket PC. It is written in ASM for ARM-processors and is 5632 bytes in size.

Brador is created to allow the master full control over the infected PDA via the port that the Trojan opens. Brador is programmed to upload and download files and execute a series of further commands. Like all backdoors, Brador cannot spread by itself: it can only arrive as an email attachment, be downloaded from the Internet or uploaded along with other data from a desktop.

After Brador is launched in creates an svchost.exe file in the /Windows/StartUp/ folder, thus gaining full control over the handheld every time it is restarted (soft reset). The program then identifies the IP address of the infected handheld and sends it to the virus coder to inform him that the handheld is connected to the Internet and that the backdoor is active. Brador then opens port 2989 and awaits further orders.

The backdoor responds to the following commands:

  • d - lists the directory contents
  • f - closes the session
  • g - uploads a file
  • m - displays MessageBox
  • p - downloads a file
  • r - executes a specified command

    Symantec reports this trojan here and Kasperski is reporting it here.












  • Twitter and LinkedIn »



    Follow us to receive Twitter updates when new discussions are posted in our forums:



    Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



    Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



    Trending now »

    Hot discussions in our forums right now:

    White Island eruption
    Created by Fred99, last reply by GV27 on 13-Dec-2019 20:20 (249 replies)
    Pages... 15 16 17


    Things that you hate about being a parent
    Created by blackjack17, last reply by elpenguino on 13-Dec-2019 21:57 (50 replies)
    Pages... 2 3 4


    BBQ/churrasco season 2019 - 2020
    Created by freitasm, last reply by mdf on 13-Dec-2019 20:04 (97 replies)
    Pages... 5 6 7


    Spark outage 7 dec
    Created by funnyfela, last reply by noroad on 10-Dec-2019 11:06 (70 replies)
    Pages... 3 4 5


    Can you help me with numeric psychometric tests?
    Created by HelpAli, last reply by floydbloke on 10-Dec-2019 12:55 (45 replies)
    Pages... 2 3


    The exciting world of toilets
    Created by MrTomato, last reply by mdav056 on 11-Dec-2019 21:20 (27 replies)
    Pages... 2


    Rental Car Pricing in Dunedin and San Fran Hotels!
    Created by networkn, last reply by networkn on 12-Dec-2019 11:53 (24 replies)
    Pages... 2


    Are these unreasonable renovation costs?
    Created by pavelmac, last reply by semigeek on 12-Dec-2019 15:06 (35 replies)
    Pages... 2 3