Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MARA Discovers First PC to Handheld Crossover Malware
Posted on 26-Feb-2006 16:26 | Tags Filed under: News



The Mobile Malware Researchers Association (MARA) has found what is believed to be the first malware to cross-infect a handheld PDA from a binary on the desktop PC.

The malware, a Trojan dubbed “crossover”, spreads from a Win32 desktop machine to a Windows Mobile Pocket PC handheld.

Detailed analysis and the malware binary are available to antivirus companies and security experts who qualify for MARA membership, which is free.

This proof of concept virus spreads from a desktop PC to a Windows CE or Windows Mobile device by running on every startup through an entry in the the registry, proceeding to wait for an Activesync connection to be detected. In every boot the virus recreates itself and again add new startup commands to the registry, which could over time lead to performance degradation on the host PC.

When an ActiveSync connection is detected the virus copies itself to the mobile device and starts executing on the PDA. It will erase all files in the \My Documents directory of the device, copy itself to the \Windows directory, and creates a shortcut to the copy in \Windows\startup.

The crossover virus was written in C# (C Sharp) using Visual Studio .NET 2003, and the Communications Library of openNETCF.org.

It should run on any Windows handheld device running Windows CE or Windows Mobile and .NET Compact Framework 1.1.






More information: http://www.mobileav.org...




comments powered by Disqus


Trending now »

Hot discussions in our forums right now:

New Vodafone Broadband Plans
Created by Naithin, last reply by antoniosk on 21-Oct-2017 17:15 (55 replies)
Pages... 2 3 4


Macrium Reflect backup software - anyone using it?
Created by geekIT, last reply by Dynamic on 23-Oct-2017 21:01 (16 replies)
Pages... 2


Vodafone TV - Is this sky?
Created by wingbat45, last reply by richms on 20-Oct-2017 18:00 (84 replies)
Pages... 4 5 6


KRACK - WPA2 essentially cracked.
Created by michaelmurfy, last reply by Paul1977 on 20-Oct-2017 09:28 (76 replies)
Pages... 4 5 6


Amazing that some speciality shops in malls survive at all
Created by amiga500, last reply by richms on 20-Oct-2017 23:07 (14 replies)

Load bearing wall? Looking for builders opinions
Created by Louis1985, last reply by Louis1985 on 23-Oct-2017 20:48 (12 replies)

Streaming of some All Blacks games on Allblacks.com for only $24.99!
Created by dazhann, last reply by vexxxboy on 22-Oct-2017 07:45 (30 replies)
Pages... 2


Sh*t Towns of New Zealand
Created by kingdragonfly, last reply by MikeB4 on 23-Oct-2017 17:35 (28 replies)
Pages... 2