Slashdot Mirror


First Destructive Mobile Phone Virus In The Wild

gbjbaanb writes "eek! the BBC is reporting the first mobile phone virus that causes damage is out and about. The virus only works with the Symbian Series 60's OS (no, not the Smartphone) and spreads through an adapted copy of the legitimate Mosquitos game. Once installed, a hidden program sends SMS texts to premium rate numbers. That's not so bad, no doubt the premium rate numbers will be switched off soon but the worst is yet to come - "typically we see them in the wild then copycat ones come along soon after," said Sal Viveros, director of wireless security at McAfee."

265 comments

  1. bah... by Anonymous Coward · · Score: 5, Funny

    "typically we see them in the wild then copycat ones come along soon after," said Sal Viveros, director of wireless security at McAfee."

    he means after they are done writing and releasing the viruses, of course.

    1. Re:bah... by Rosco+P.+Coltrane · · Score: 2, Interesting

      Just entertain the thought for a moment: could it be , just by some remote chance, that with Microsoft about the kill the A/V market on Windows, the recent release of new viruses on the previously untouched smart cellphone target isn't just a coincidence?

      I mean, you've got to admit, cell phones that do many things a computer does and require a complex OS aren't exactly new, and they've always been "networked" (by definition), but somehow it's only now that this market could provide a bail-out route from the Windows platform for A/V companies that these viruses come out. Strange isn't it?

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    2. Re:bah... by Tongo · · Score: 5, Funny

      Here, you need it more than I do....
      **passes tinfoil hat***

    3. Re:bah... by Anonymous Coward · · Score: 1, Insightful

      tongue-in-cheek, originally. i think there needs to be no cabal and no conspiracy. smart, uncaught virus originators (not the pimply fall guys) are betting on MFE to profit from their creations.

      i wouldn't be surprised if big pharma relied on a similar mechanism.

    4. Re:bah... by davFr · · Score: 1

      First I thought that indeed it was very strange. But then, how comes several virus authors were arrested in previous years, and none appeared to be connected to antivirus editors? Additionaly, the pressure put on mobile phone manufacturers by the market (mainly phone companies offering the phone to the subscriber) is going higher and higher, and embedded CPUs are more numerous and complex. I would not be surprised if there were security issues somewhere in the code. On the other hand, it seems less complex to write a virus for linux (or a specific broadly installed version - let's say Red Hat 8) or MacOS, but no virus appears. Is it because there is no market for a proprietary antivirus (a/v) tool on Linux? Wireless is definitivly a huge market for a/v! You think you would never pay for an a/v for your mobile, right? But phone companies and manufacturers will!! AND THAT'S HUGE MONEY!! Question: why would a/v editor have specific "wireless security" director?? My 2 cents.

      --
      RIP Slashdot. I used to love you. dead account - but slashdot wont let me delete it.
    5. Re:bah... by kasperd · · Score: 2, Insightful

      I don't want antivirus on my phone. Because antivirus is an attempt to cure the symptoms rather than the disease. The solution to the virus problem is first of all to avoid dangerous features. That is number one reason why so many viruses target outlook. The rest of the email clients don't have all the dangerous features. The same should hold for phones. Some code I download from an arbitrary location should not have uncontrolled access to all of the phones features. That means it shouldn't be able to send an SMS without the users acknowledge, and it should not be able to make phone calls, neither should it be able to prevent the user from making phone calls.

      But security is more than just that. It also means they have to carefully review their code so most bugs gets squashed before the software is released. And a layered design would be a good idea. At one of the lower layers you put basic functionality that controls making and receiving calls and likewise messages. This layer must also ensure, that you can always get access to those features. So a program I download just may not be able to take complete control over the user interface. This shouldn't prevent anybody from for example creating a phonebook with some fancy features, that you can download from the net. But it may never be able to actually perform the calls, it can provide the numbers, and the user will actually see the number and have to press the dial button himself to make the call.

      --

      Do you care about the security of your wireless mouse?
    6. Re:bah... by antic · · Score: 1


      bah - agreed!

      I tried the Symbian Series 60's OS but the psychadelic backgrounds and Herman's Hermits ringtones started to get to me.

      --
      'Thats they exact same thing a banana wrench monkey.'
    7. Re:bah... by black+mariah · · Score: 1

      So what you mean is that the solution is to not turn your phone on. Problem solved!

      --
      'Standards' in computing only impress those who are impressed by things like 'standards'.
  2. Bring on the Symbian/Sybian jokes by Anonymous Coward · · Score: 0

    in 3... 2...

    1. Re:Bring on the Symbian/Sybian jokes by SlashdotLemming · · Score: 4, Funny

      I'm sure most Sybians already have viruses :)

  3. Great.... by MP3Chuck · · Score: 3, Interesting

    Yet another reason I'm glad I have my cell phone that ... OH YEA! Just makes calls. Who'd have thunk it?

    1. Re:Great.... by Anonymous Coward · · Score: 0

      And there are still those who bitch and moan because they don't have the latest games on their cellphones or the color's a bit off.

      And then they bitch because their phone's battery life goes way down because they're always playing games on it.

    2. Re:Great.... by nlawalker · · Score: 5, Interesting
      I wish I had a phone that just made calls. It seems that mobile phone companies still have yet to make a phone that can even do that well. I'd love to see a push forward in a more usable interface too... obviously, it's tough to change things such as the stanard telephone key layout, but my newer Nokia phone, for example, has basically the same look and feel as one of the first phones I ever had years ago. Also, the power button is a pain in the ass, the battery cover is very flimsy, and the color screen (of which I really wouldn't care if it was black and white) is difficult to read even in mild sunlight.

      Once they make a phone that fixes problems like these and works with the service in a way that I can make and receive good quality calls, THEN I'll be interested in what they have to say about other uses of mobile phones.

    3. Re:Great.... by glesga_kiss · · Score: 4, Insightful
      I'm glad I have my cell phone that ... OH YEA! Just makes calls. Who'd have thunk it?

      I know, I was like talking to a friend the other day, and he said he saw a computer with "CD-ROM" device attached to it. What's the point in that? Who'd ever need to play music on a computer? All you need is to be able to print letters. Floppy disks ought to be big enough for everyones storage needs.

      /sarcasm (circa 1992)

    4. Re:Great.... by Anonymous Coward · · Score: 0

      I've been saying for years that I won't give up my old Nokia 5100. If my carrier switched to a system that doesn't support it and offered a free replacement of their most expensive phone available, I'd still turn them down and look for someone who supports the older, simpler phones.

      Sometimes a phone is just a phone :).

    5. Re:Great.... by NanoGator · · Score: 1

      "Yet another reason I'm glad I have my cell phone that ... OH YEA! Just makes calls. Who'd have thunk"

      Good for you. However, some of us like those extra features in our phones and would prefer they make them more secure.

      --
      "Derp de derp."
    6. Re:Great.... by trentblase · · Score: 1

      Go get a StarTac

    7. Re:Great.... by Anonymous Coward · · Score: 0

      Some of the 'lower end' Nokias for example (at the bottom of all Nokia phone pages like http://www.nokiausa.com/phones/) are monochrome, with not too many frills. I have a 6160 right now, and I don't know what I'll do when it dies. You can't buy batteries for them anymore in Canada, except for whatever the vendors still have in stock. The 3590 or one of the 33xx for example look not too bad. Very small, NOT flip phones (which Nokia doesn't really do anyways), and LONG standby times (12 days on the 3590?).

    8. Re:Great.... by Anonymous Coward · · Score: 1, Insightful

      Yes, but computers are modular, and you can actually buy (or build) a computer without a CDROM drive or floppy drive even. Also, software (of the type you buy) comes on CDs, and so does music, so you NEED the CDROM drive. But when over half the phone models have cameras and play mp3s, and 80% have colour screens, and almost none have a decent built-in ring tone anymore, all those features add weight, cost, points of failure, and battery drain. They may be useful to some, even many, people, but you almost can't buy a decent phone these days that just makes calls and lasts a decent amount of time between charges.

      And they're not even that small! I am actually surprised at how large some of the new phones are! What the fuck, I thought things were supposed to get smaller, not bigger. I still have a Nokia 6160 (I know, /me hangs head in shame), the model is almost 10 years old now, and it is not noticeably bigger than your typical new-fangled handset.

    9. Re:Great.... by Heartz · · Score: 1
      Stick to the cheap Nokia series. I got the Nokia 1100 as a replacement for my Nokia 3315 which got lost. The phone is nothing but excellent.

      None of the fancies smancies. Great memory for storing tonnes of SMS messages. Extra phone number memory. Battery life is amazing and we still have the good old Snake game.

  4. so who do i sue ? by Anonymous Coward · · Score: 1, Interesting


    do i sue the phone manufacturer or my provider for flaws in their product that cause me financial loss ?
    perhaps after getting bitchslapped in courts is the only way to teach manufacturers that quality counts and YOU WILL be held responsible if you products are faulty

    1. Re:so who do i sue ? by Launch · · Score: 3, Insightful

      How about the malicious code writer that actually caused your problem. I agree that good OS software should be implimented no matter what device it is running, but let's not let the REAL cuprit slide on this one.

      --
      Your mammas flamebait.
    2. Re:so who do i sue ? by jeremyp · · Score: 4, Insightful

      You can't sue anybody. This is a trojan inside a pirated game. The only way it spreads is for you to deliberately install it. There's no way to differentiate it from a piece of legitimate software that sends text messages.

      --
      All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
    3. Re:so who do i sue ? by mkeroppi · · Score: 3, Interesting

      The thing is the victim is not the one spreading the trojan. Receivers of SMS are those that pay for it. The Trojan is inside the sender's phone.

    4. Re:so who do i sue ? by Anonymous Coward · · Score: 0

      I want to sue my car manufacturer because I put diesel fuel in my car.

    5. Re:so who do i sue ? by MarkVVV · · Score: 1
      Every piece of software has it's flaws.

      In this case, you should sue the person who wrote the virus. The company who wrote SymbianOS should only be responsible if they don't release a patch to their software.

    6. Re:so who do i sue ? by NanoGator · · Score: 1

      "do i sue the phone manufacturer or my provider for flaws in their product that cause me financial loss ?"

      No. They didn't cause your financial loss, somebody with malicious intent did. It's fun to think about busting the companies that shoulda musta made their product perfect, but the truth is that holding them responsible for people making malicious use of defects won't do any good. First, there's the whole question of liability. Who's gonna wanna make anything if they could be sued over somebody else's creativity? Second, there's the matter of stopping the true problem: People intentionally causing these things to happen. Third, anything can be misused. Where do you draw the line?

      I agree that companies should hold quality to a higher standard, but suing them for every little defect in the OS is not going to do any good.

      "YOU WILL be held responsible if you products are faulty"

      Not likely. A simple chat with your service provider will get it cleared up. Cell phone companies do not mess with you on things like that.

      --
      "Derp de derp."
    7. Re:so who do i sue ? by Tim+C · · Score: 1

      Receivers of SMS are those that pay for it.

      Huh? In the UK at least, when I send an sms, it costs me (about 10p each). When I send one to a friend, it costs them nothing. Now, there are some services that, when they receive an sms (perhaps with an appropriate code) from me, will send a reply or replies, for which I will be charged - that's the sort of "premium" smses that were alluded to in the summary.

      Has the US really got a "receiver pays" system, or is one of us confused?

    8. Re:so who do i sue ? by jkmiecik · · Score: 1

      In the US, you pay for each SMS recieved and sent. Most carries have some sort of plan. Example, T-Mobile USA has 1000 SMS messages for US$7 a month.

    9. Re:so who do i sue ? by jeremyp · · Score: 1

      "Receivers of SMS are those that pay for it"

      Not in my country. Sender pays. This is why I'm not drowning in SMS spam yet.

      --
      All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
  5. bandwith is not necessary to be annoying by garcia · · Score: 4, Insightful

    "Once we are in the 3G world, we basically have a broadband connection, so phones will be closer to PCs in terms of functionality.

    "Having that connectivity historically leads to the spread of viruses."


    Once more and more devices run the same OS/software and more and more people are using that same OS/software more and more viruses will be written for it. Bandwith has little to do with it.

    SMS' to "premium numbers" are annoying and don't require massive mobile bandwith to work.

    1. Re:bandwith is not necessary to be annoying by Anonymous+Brave+Guy · · Score: 1
      SMS' to "premium numbers" are annoying and don't require massive mobile bandwith to work.

      They do, however, require both the programmable technology to install/run and, in this case, the user to deliberately acknowledge the existence of something installing/running. You have been told. :-)

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    2. Re:bandwith is not necessary to be annoying by YU+Nicks+NE+Way · · Score: 5, Insightful

      Not only is bandwidth irrelevant here, this issue has nothing to do with OS/software. The malware is written in mobile java, and uses the standard, OS-independent, interface to the phone hardware itself to send the SMS messages.

    3. Re:bandwith is not necessary to be annoying by wwest4 · · Score: 3, Interesting

      The quote seems in line with intuition at least... how would it go - as the bandwidth increases, practical usage will increase, the number of active nodes will increase, and voila a petri dish for more sophisticated viruses. Sure, it's not the only catalyst, but bandwidth seems to have something to do with it.

    4. Re:bandwith is not necessary to be annoying by garcia · · Score: 2, Informative

      It has nothing to do with software? Yes it surely does. Java-enabled phones run software. Thus OS/software is relevant.

    5. Re:bandwith is not necessary to be annoying by YU+Nicks+NE+Way · · Score: 1

      Forgive me, I misunderstood your original post. I read you as invoking the standard "OS monoculture" meme when you talked about more and more . In this case, there's no relationship to any OS monoculture, merely to a fixed API on any phone which aupports J2ME. Since the game itself has to be written in something, I don't see how anything beyond having an API to send an SMS has anything to do with this issue?

    6. Re:bandwith is not necessary to be annoying by YU+Nicks+NE+Way · · Score: 1

      No, an API isn't software -- it's a specification. Support for or use of an API requires software, usually, but, no, an API is not software.

      Sorry that you were unclear on the concept.

    7. Re:bandwith is not necessary to be annoying by callipygian-showsyst · · Score: 4, Funny
      The malware is written in mobile java, and uses the standard, OS-independent, interface to the phone hardware itself to send the SMS messages.

      Just a second! Sun's been telling me to use Java because it's secure!. Certainly, we all know from reading /. that only Microsoft is vulnerable to these 'trojan horse' attacks because their software is poorly written!

      Are you telling me that Java is poorly written? Or is there really no defense against tricking users into loading and running programs (as most Windows "viruses" of the past year or so have spread).

      If that's true, then phones shouldn't be able to run software at all!

    8. Re:bandwith is not necessary to be annoying by SlashSpam · · Score: 1

      This "virus" seems to me more like a like a Trojan horse, and it seems that the "SM(S)-feature" of this "Trojan horse" was build into the game originally, so this particular incident is far from typical. That being said, I think the OS pretty much does matter in this case, to quote the article:

      "The virus only works with the Symbian Series 60's OS .."
      /Spam .
    9. Re:bandwith is not necessary to be annoying by kd5ujz · · Score: 1

      Well, if it was a flaw in the code that allowed the installation of the software ( buffer overflow errors in the windows kernel, or whatever) then you can blame it on microsoft. But this is simular to installing netbus on someones computer. You have to install it, and to windows it looks like a legitimate program( and later netbus sued so that they could sell their program to compete with pcanywhere). The java program runs on the phone, but it needs to be installed. This is not a security flaw in the phone, but a security flaw in the user. Its the 1D10T error.

      --
      -William
      God is everything science has yet to explain.
    10. Re:bandwith is not necessary to be annoying by cbiltcliffe · · Score: 2, Interesting
      If that's true, then phones shouldn't be able to run software at all!
      BINGO!! That's probably the smartest thing anybody's said so far!
      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    11. Re:bandwith is not necessary to be annoying by NanoGator · · Score: 1

      "BINGO!! That's probably the smartest thing anybody's said so far!"

      Yeah, and if you did't have a net connection to your computer, you wouldn't get viruses, trojans, or worms. That'd be the effective way to secure PCs. I don't like the internet, therefore I think this solution is perfect for everybody else that uses PCs.

      --
      "Derp de derp."
    12. Re:bandwith is not necessary to be annoying by cbiltcliffe · · Score: 1

      Nobody's forcing you to use the internet with your computer.

      When, exactly, is the last time you saw a cellphone for sale, that was just that - a cellphone?

      If people want all sorts of crap on their phones, fine...they can have it. I just want a phone, and I don't want to pay for all sorts of extra crap. I can't do that, because the product I want has been bloated and gadget-i-fied by marketing PHB's.

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    13. Re:bandwith is not necessary to be annoying by NanoGator · · Score: 1

      "I can't do that, because the product I want has been bloated and gadget-i-fied by marketing PHB's."

      It's been 'bloated' by supply and demand. You caaaan't always geeeeeeeeeet what you waaaaaaaaant!

      --
      "Derp de derp."
    14. Re:bandwith is not necessary to be annoying by trentblase · · Score: 1

      When, exactly, was the last time you saw a car for sale that was just that - a car? I don't want all this fancy radio, multiple gears, glove compartment... windows! Who needs windows?

    15. Re:bandwith is not necessary to be annoying by Lihtan · · Score: 1

      Mitsubishi Lancer Evolution RS
      The RS package is designed for sportscar purists that don't want heavy luxury crap in their cars. 150 lbs is dropped from the curbweight, the wing is removed, no carpet in the trunk, no stereo, no soundproofing, no AC, no power windows, no power locks, no rear wiper, no ABS, no HID headlights. The package also adds a rear strut brace and a front LSD.

      I would buy one of these only if Mitsubishi would only get off their asses and bring the EVO to Canada...

      --
      Divide by zero hurts my brain.
    16. Re:bandwith is not necessary to be annoying by Tryfen · · Score: 1

      I am so bloody sick of this argument!

      Go and buy a Nokia 1110.

      It's a brand new Nokia with no camera, no mp3 ringtones, no gimmicks.

      There are loads of basic phones out there which are nothing but talk and text devices. And they sell like hot cakes.

      T
      --
      Not speaking for my employer

      --
      If a square is really a rhombus, why aren't all triangles purple?
    17. Re:bandwith is not necessary to be annoying by Anonymous Coward · · Score: 0

      so phones will be closer to PCs in terms of functionality

      What a novel idea!

      If anyone in here would like to invest, I propose a business venture: Let's design a phone with a sizable display, full qwerty keyboard, lots of ram, a hard drive and access to some removable media. I propose we call it a "notebook."

      Come on guys we're just a skip away from step 3! =)

    18. Re:bandwith is not necessary to be annoying by cbiltcliffe · · Score: 1

      In Canada? You may be able to get them in England, but I haven't seen one for years in Canada.

      If they exist, they're well hidden...

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    19. Re:bandwith is not necessary to be annoying by Tryfen · · Score: 1

      yeah... really well hidden. Seimens C56 from Rogers. Just about the most simplistic model on the marketplace, but it should be you fine if you don't want anything whizz-bang.

      It took a 2 minute search and I'm not even Canadian (although I did study there a few years ago).

      T

      --
      If a square is really a rhombus, why aren't all triangles purple?
  6. Not quite as I'd have thought. by YU+Nicks+NE+Way · · Score: 5, Interesting

    According to The Register, the malware was built into Mosquitos to begin with as a copy protection mechanism. I don't know whether to believe it or not -- if it's true, it's a really clever way of recouping development costs, and puts a new twist on "software that calls home".

    Of course, worm writers will still catch on quickly anyway, I'll bet.

    1. Re:Not quite as I'd have thought. by garcia · · Score: 3, Interesting

      For most people SMS' will show up on their bill as most people don't do much FREE sending of SMS' (at least here in the states). I think that these people would see their bill go up and find out the reason for it.

      Personally, if I were charged for SMS' without my consent I would want to recoup those costs myself as well.

    2. Re:Not quite as I'd have thought. by Anonymous Coward · · Score: 2, Interesting

      It isn't "clever" at all - a lot of commercial software does the same thing over TCP/IP if available. (TeXtures and QuarkXPress for Mac both did this, though one could just unplug eth0 while the app booted...)

      The ONLY difference here is that it uses a premium, possible-pay-per-use medium to make the calls and is thus, afaic, not too different from those porno over-seas 900 dialers that were a big deal last year. This is not clever and it is probably illegal under computer abuse acts (sure would be in the US), at least if the SMS "feature" was really a secret as the author was quoted.

    3. Re:Not quite as I'd have thought. by Anonymous Coward · · Score: 1, Funny

      A virus built into Mosquitos. Is this virus called the West Nile?

    4. Re:Not quite as I'd have thought. by Tim+C · · Score: 1

      It probably varies from provider to provider, but even free calls, etc show up on my bill - they're just charged at "0.00" and have an "F" beside them. Thus a cursory glance should reveal this sort of thing going on if it does it a lot, especially if it does it at odd times (ie I wouldn't be smsing anyone at 3am on a Tuesday...)

    5. Re:Not quite as I'd have thought. by soimless · · Score: 1

      its still not as funny as the moblie virus that asks you if it can spread. but it perty cool that they can spread this type of thing in a simple game

    6. Re:Not quite as I'd have thought. by decepty · · Score: 2, Interesting

      According to Symantec, this virus was dicovered on January 7th... Did it really take 7 mos. to get out to the wild/become a threat, or is the BBC just having a slow news day?

      --
      Be careful! Bears shouldn't consume large furry dogs.
    7. Re:Not quite as I'd have thought. by Beryllium+Sphere(tm) · · Score: 1

      For what it's worth F-Secure says the same thing as the Register, that it was a copy-protection feature:
      http://www.f-secure.com/weblog/#00000259

    8. Re:Not quite as I'd have thought. by FireBook · · Score: 1

      computer virii are not cool. not for any os or device. you, sir, are as bad as the asshats who launch the real thing.

      --
      My other OS is also FreeBSD
    9. Re:Not quite as I'd have thought. by trentblase · · Score: 1

      Computer viruses are, however, quite cool. I guess those asshats who are researching fusion are jerks because the result could be used to kill.

    10. Re:Not quite as I'd have thought. by FireBook · · Score: 1

      ...and fusion has usefulness......since when do virii?

      --
      My other OS is also FreeBSD
  7. Nope - "virus" is a broken anti piracy system by minator · · Score: 5, Informative
    The "virus" is a broken anti piracy system...

    Get the full shimmy here.

    1. Re:Nope - "virus" is a broken anti piracy system by irokitt · · Score: 3, Funny

      So, does anyone have a torrent going yet?

      --
      If my answers frighten you, stop asking scary questions.
    2. Re:Nope - "virus" is a broken anti piracy system by Lehk228 · · Score: 1

      and it is still a virus which should be prosecuted to the fullest extent of the law, it is not legal to make software which detects cracking attempts and harms the user as "punishment"

      --
      Snowden and Manning are heroes.
    3. Re:Nope - "virus" is a broken anti piracy system by _anomaly_ · · Score: 1

      Then the question would be is it still illegal if the software comes with a EULA that disclaims this kind of "feature"?

      That is, assuming it came with such a EULA.

      --
      "I have no special gift, I am only passionately curious." - Albert Einstein
    4. Re:Nope - "virus" is a broken anti piracy system by Nurseman · · Score: 2, Interesting
      Okay, I not only RTFA but I RTF Link (The Register) too, I don't get this part:

      Although the Mosquitos saga turns out to be an urban myth, the recent discovery of the first malware capable of infecting smartphones shatters the comforting belief the mobile phones are safe from viral infection. The threat is very low at present but shouldn't be completely discounted. ®
      So is it real or urban myth ? Also, as repeatedly mentioned, you must install an run "Warez" version of this game for it to work. Let the buyer beware !

      --
      Save a Life. Donate Blood. Please.
    5. Re:Nope - "virus" is a broken anti piracy system by gl4ss · · Score: 2, Interesting

      it's not a virus anyways..
      it only gets distributed by people.. ..and only gets installed by people who want to install it.

      it's a sms sender attached to a warez release - nothing more nothing less.

      --
      world was created 5 seconds before this post as it is.
    6. Re:Nope - "virus" is a broken anti piracy system by Lehk228 · · Score: 1

      well it would be assumed that the cracked version would be stripped of the eula, so no it would still be illegal, just as it would be illegal for a windows EULA to say "If windows detects attempts to pirate 1-900 numbers will be called by your modem."

      --
      Snowden and Manning are heroes.
    7. Re:Nope - "virus" is a broken anti piracy system by zarr · · Score: 1
      I don't get this part:

      "The first malware capable of infecting smartphones" is a different program, Cabir.

    8. Re:Nope - "virus" is a broken anti piracy system by Lehk228 · · Score: 1

      actually it was attached to the original which detects if it a warezed copy then steals bandwidth/airtime from the owner of the phone in order to report back.

      --
      Snowden and Manning are heroes.
    9. Re:Nope - "virus" is a broken anti piracy system by gl4ss · · Score: 1

      well that's something unconfirmed.. ..apparently there's a version that doesn't do it so i'd take it to be under suspicion..

      --
      world was created 5 seconds before this post as it is.
  8. So? Dont get your software from P2P.... by Kenja · · Score: 5, Insightful

    First, its not a virus since it cant spread on its own. Its a trojan if its anything. Second, since this only effects people who steal software, why should i care?

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:So? Dont get your software from P2P.... by Maestro4k · · Score: 0
      • Second, since this only effects people who steal software, why should i care?
      Because it's a sign of things to come. Today it only affects someone who stole some software, tomorrow it affects everyone with a particular model of phone, next month one may hit your phone and cause service disruption.

      Just because it doesn't affect you this time doesn't mean you shouldn't care about what's happening.

    2. Re:So? Dont get your software from P2P.... by Kenja · · Score: 3, Insightful
      "Because it's a sign of things to come. Today it only affects someone who stole some software, tomorrow it affects everyone with a particular model of phone, next month one may hit your phone and cause service disruption."

      How? How is this unknown bad software of the future going to get on my phone? I've got a dev license to symbian and so far I've not seen any way for software to spread unchecked. Sure it could get pushed via a SMS message, but the user would have to click through it to install.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    3. Re:So? Dont get your software from P2P.... by Anonymous Coward · · Score: 2, Insightful


      Sure it could get pushed via a SMS message, but the user would have to click through it to install.

      The same can be said about the majority of Windows malware and look at how successful that malware has been.

    4. Re:So? Dont get your software from P2P.... by Errtu76 · · Score: 1

      The same way that a virus spreads through email. First nobody heard of it. Then nobody would believe it. Then Microsoft had to make a patch for Outlook. Do you really think phones nowadays with virtually unlimited possibilities are safe? Maybe for now, yes.

    5. Re:So? Dont get your software from P2P.... by Kenja · · Score: 0, Flamebait

      So your saying that my plain text SMTP mail client on my phone can execute complex scripts like outlook can? Must be an undocumented feature.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    6. Re:So? Dont get your software from P2P.... by FuzzyBad-Mofo · · Score: 1

      These game developers took it upon themselves to write a fraudlent scam (SMS to premium numbers) into their software, allegedly to punish unauthorized users. Maybe some people feel this is justified, however, what would be your opinion if the "bomb" was defective and instead of punishing unauthorized users, punished everyone? Do we need software houses taking the law into their own hands?

    7. Re:So? Dont get your software from P2P.... by Kenja · · Score: 0, Flamebait
      " Maybe some people feel this is justified, however, what would be your opinion if the "bomb" was defective and instead of punishing unauthorized users, punished everyone?"

      I think it was a dumb thing for them to have done. However it didn't effect everyone, only those who have no respect for the work and efforts of others. For some reason I just cant get worked up about that.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    8. Re:So? Dont get your software from P2P.... by ThomK · · Score: 1

      You should care because regardless of your own morals, someone just proved that its possible to rip off honest people.

      --

      TK

    9. Re:So? Dont get your software from P2P.... by NanoGator · · Score: 1

      "First, its not a virus since it cant spread on its own. Its a trojan if its anything. Second, since this only effects people who steal software, why should i care?"

      You should care because not stealing software will not immunize you from being infected by a variant.

      --
      "Derp de derp."
    10. Re:So? Dont get your software from P2P.... by FuzzyBad-Mofo · · Score: 1

      Yes, but how would you have felt if there was a defect in the routine which caused all users, both legitimate and illegitimate, to be affected?

    11. Re:So? Dont get your software from P2P.... by Anonymous Coward · · Score: 0

      Not necessarily. You have to download and install a trojan yourself, whereas a virus spreads on its own. If the phone doesn't allow others access to run arbitrary code (the way, for example, Microsoft's handling of OLE does), a virus is not even in the realm of possibilities. Now perhaps some company might try to introduce a system where they can remotely update your phone, or some such, but then that would easily be made secure with authentication...

  9. So stale, so wrong by Entrope · · Score: 5, Informative

    The Register already dug into the details. The premium-rate calls were not added by a virus or by warez monkeys, but were in the original game as a way to monitor who copied it.

    1. Re:So stale, so wrong by ravydavygravy · · Score: 1

      who to believe? - the BBC article states that the program never sent sms messages to premium rate numbers - it just sent SMS messages back to base if the version being used was unlicensed. This was a feature of the game, not introduced by crackers... Hardly what I'd call a virus...

    2. Re:So stale, so wrong by Lehk228 · · Score: 1

      Hardly what I'd call a virus...

      I agree, i would call it a trojan rather than a virus

      --
      Snowden and Manning are heroes.
  10. Why is this news by Svennig · · Score: 4, Insightful
    Why is this news?

    This is more a user intelligence program than a true threat to the symbian 60 series. If it propogated to all the numbers in a phone book (via SMS for example) then it would be something worth worrying about.

  11. WTH? by Joe5678 · · Score: 2, Insightful

    Ok the article that is linked to explicitly says that it does NOT send SMS to premium numbers, only regular SMS messages, and that it does no other damage. So explain to me how this is so very "Destructive"?

    1. Re:WTH? by Tet · · Score: 1
      it does NOT send SMS to premium numbers, only regular SMS messages, and that it does no other damage. So explain to me how this is so very "Destructive"?

      Regular SMS messages still cost money. OK, so it's not "destructive", but it's definitely harmful.

      --
      "The invisible and the non-existent look very much alike." -- Delos B. McKown
    2. Re:WTH? by Anonymous Coward · · Score: 0

      Because sending an SMS costs money (sometimes).

    3. Re:WTH? by Joe5678 · · Score: 1

      I think maybe a better headline would have been "First Mobile Phone Virus To Cost Money In The Wild"

      Except that's not even true, since there have been viruses before that did that.

      So I guess that headline should have been "New Destructive Virus, not really destructive or new though"

  12. Wow! Where'd'ya find that? by wiredog · · Score: 5, Funny
    Is this something new?

    Maybe it's the leading edge of a whole, new category of consumer devices! The single purpose device that only does one thing, but does it well!

    1. Re:Wow! Where'd'ya find that? by Anonymous Coward · · Score: 0

      Don't get your hopes up, it probably won't catch on.

    2. Re:Wow! Where'd'ya find that? by FrankHaynes · · Score: 4, Insightful

      The problem is that marketers, in league with the propeller heads, keep finding more and more features that we don't need while ignoring the one feature that we all demand: reliable voice coverage.

      Just because we can do something does not mean that we must or should do it. This is yet another example of a solution searching desperately for a problem; a feature (of J2ME) which is rushed to market in the hopes that everyone will go ga-ga over it, while the basic cellular service problems go ignored.

      --
      slashdot: A failed experiment.
    3. Re:Wow! Where'd'ya find that? by sfm · · Score: 3, Interesting

      All these added features in a cell phone.....it makes sense from a manufacturers point of view.

      They are all asking their R&D departments to come up with features that give the most bang for the $'s spent. While there are serious cost limitations on how the communications portion of the system can be improved, extra games are simply added software and attract customers attention.

      Cameras can be explained in a similar (but more complicated) way. Camera hardware is an added expense, BUT the phone service providers can charge a premium for data (picture) transfers on top of the voice connection.

      Improvements in the telephone portion of the system are usually subtle and go unnoticed by the general public. If there were some source of information comparing a cell phones basic features (Sound Quality, Battery Life, Larger possible service area....) and this was EASILY available to the public, you may start seeing the phone manufacturers start giving us features we really care about.

      Personally, I could give two hoots about pictures and mp3's coming through my phone. I would be quite satisfied with good voice service and SMS. Maybe if more people expressed this idea, there would be a reaction in the market.

    4. Re:Wow! Where'd'ya find that? by Tintivilus · · Score: 3, Insightful

      keep finding more and more features that we don't need while ignoring the one feature that we all demand: reliable voice coverage.

      Why does everybody think cell phone manufacturer's are the ones who are installing cell sites? I can make a simple voice phone if I want to, but it's not going to do anything at all to the number of cells in the field. Cell manufacturers take the radio performance of their handsets very seriously -- but that means precisely jack when there's no signal to pick up, or your carrier doesn't have a roaming agreement with any of the networks your phone can see

    5. Re:Wow! Where'd'ya find that? by stu72 · · Score: 1

      Actually you're not quite correct.

      it's true that marketers & engineers come up with new features to pack in, but they do this for only one reason - people buy them.

      maybe people on /. can see through featuritis and say "no.. I don't need that" but 99% of people cannot - and buy whatever has the most features, biggest #'s on the box etc..

      This is a pyschological problem, not a technical one

    6. Re:Wow! Where'd'ya find that? by Kra+Z+Joe · · Score: 1

      Every phone I had with a protruding antenna or antenna-like device has lost that appendage at least once during it's life while I was "wearing" it... campers, door jams, arm chairs, seatbelts, kids, power tools, tree branches... you get the idea.

      I resorted to keeping my phone in my pocket to keep it safe - but it really became a literal pain in the you-know-what.

      I've since moved and have no cellular reception 20 out of 24 hours a day - so I no longer have a cell phone. I find the silence very... peaceful.

  13. Correction.... it did NOT SMS premium numbers... by gambit3 · · Score: 3, Informative

    From the article:

    The company that made the original legitimate Mosquito game, Ojom, said it had installed the program itself in earlier versions of the game after concerns over piracy.

    It was intended that the program secretly send a SMS message to alert them if an unlicensed copy was being used, according to Mr Hypponen.

  14. Not a virus by nmg196 · · Score: 5, Interesting

    This is not a virus. It doesn't spread itself. It's simply a trojan that you have to manually download and install by bypassing two security warnings after first having found it on an irreputable site or P2P network. Hardly a threat.

    I'm also not sure it deserves to to be called destructive either. It doesn't destruct anything or in any way modify any other services on your phone - it simply sends SMS messages. It would be better classed as "expensive" :)

    1. Re:Not a virus by cephyn · · Score: 1

      Well, if it racks up enough charges that you can't afford to pay your bill, then your service will be terminated. That's a pretty big modification to you phone services!

      --
      Moo.
    2. Re:Not a virus by stratjakt · · Score: 2, Funny

      What about those porn-dialer trojans that call crazy 900 numbers in asia, do you consider those harmless?

      Malicious may have been a better word, but "destructive" like most adjectives is pretty much subjective.

      If you think about it, malware is destructive if you incur a cost.. Either in time, money or both.

      I'd consider this more "destructive" than a virus that, say, wiped out my address book, because that would only 'cost' me about 20 seconds to resync to my PC. This would cost me the many hours and hassles to reverse the charges on my bill. Go ahead and dispute a charge with Verizon or Sprint and see how much fun it is.

      They once billed me for a 27 hour call on my cell phone, which was absolutely ridiculous since it's battery is lucky to hold up for 45 minutes and it only uses battery power, even when plugged in.. The manual says its so I wont get electrocuted by mains power, which is equally silly, since it charges from a wall-wart that delivers a whole 300ma at 12V. Truly a piece of craptastic engineering.

      Where was I? Oh yeah, cell tech sucks and I've yet to complete a conversation without the call being dropped. "Can you hear me now" my ass.

      --
      I don't need no instructions to know how to rock!!!!
    3. Re:Not a virus by Anonymous Coward · · Score: 0

      Maybe if you took your tinfoil hat off, you'd get better cell reception.

    4. Re:Not a virus by dspyder · · Score: 2, Insightful

      You're correct!!! And rather than post a redundant message, I will add here that this type of crap (non-replicating, non-spreading) should be reffered to as a Trojan or at the very least Malware (depending on exactly what it does).

      Of course, the public grasps onto Virus = Bad, regardless of its actual function

      In reality, most computer viruses are fascinating studies...

      --D

    5. Re:Not a virus by nmg196 · · Score: 1

      > And rather than post a redundant message, I will add here that this
      > [...] should be reffered to as a Trojan

      But I've already said that it should be referred to as a trojan, so you HAVE posted a redundant message.

  15. That is why... by Space_Soldier · · Score: 3, Insightful

    ... a phone needs to be just a bloody phone.

    1. Re:That is why... by BarryNorton · · Score: 1

      I agree, I hate that I have an address book (not just numbers), calculator, calendar, notes and to-do list in my phone... it just makes things so convenient! (I shan't even mention the conversion app that allows me to talk to non-metricated types...)

      Same with a horse and carriage - I refuse to travel in these ungodly horseless contraptions...

    2. Re:That is why... by Launch · · Score: 2, Interesting

      Product integration is a great idea. I'm happy my phone has a digital camera in it, I'm happy I can sync it to outlook. Both my PDA and Digital camera are factors of 10 better than the tools on my moto V400.... but when I'm steping out of the house it's nice to not have to gear down unnessicarly.

      A phone needs to be just everything it can possibly be.

      --
      Your mammas flamebait.
    3. Re:That is why... by Anonymous Coward · · Score: 0

      ... a phone needs to be just a bloody phone.

      i just want my phone to be able to make calls, not something to bludgeon someone with...

    4. Re:That is why... by Anonymous Coward · · Score: 0

      wow, I actually agree with this but with one difference, certain phones need to just be phones. I just want a address book, long battery life, and good connection. well, at least I used to.

      I don`t care if they come out with 10 new phones that can do anything anyone else wants, I just wish they would keep one model that actually gets good reception. oddly enough though, in 3 years, the only phone I have had to this was a nokia I borrowed from my dad for a couple weeks. Amazing reception, but it turned out to be loaded with every single program I could ever not want. But you know, I will take all the extra`s there are if I can just hear my damned conversation properly.

    5. Re:That is why... by Anonymous Coward · · Score: 0

      And that's why a PC should be just a bloody typewriter + calculator. No virusses!

    6. Re:That is why... by Anonymous Coward · · Score: 0

      So what happens when your not-so-techy friend gets a virus on their phone and the virus starts dialing all the numbers on their phonebook repeatedly, trying to propogate itself? What if this started at 10:00pm, the day your other friend was having an operation and you were waiting for the prognosis call, so you can't just turn off your phone?

      I hope someone is working on a cellphone version of firewalls.

    7. Re:That is why... by Launch · · Score: 1

      Ummm, this happens to e-mail all the time, and I don't see people out there crying for e-mail systems to be seperate devices from desktop computers... yeah there is the potential for hazzards, but if we backed down ever time there was a danger we wouldn't be very far, now would we...

      --
      Your mammas flamebait.
    8. Re:That is why... by Anonymous Coward · · Score: 0

      you might be on to something...lets remove email from the computer, we can stick it on cell phones instead,

    9. Re:That is why... by FictionPimp · · Score: 1

      The actual point that is trying to be made, is that you can still buy a word processor, or a calculator. You can't buy just a cell phone.

    10. Re:That is why... by pacman+on+prozac · · Score: 1

      Well no, we need to be able to buy whatever we want. Surely you'd agree choice is a good thing.

      Sure, they should sell phones that are everything they could possibly be. They also should sell simple phones for people like me who don't want shortened battery life, slower operation, increased likelyhood of failure, to have to "update" software, to have to leave my phone everytime I enter a secure area because of the camera, more complex interface, risk of viruses or any of the other reasons there are for not wanting more complicated phones.

      If you like having a fully featured phone then cool, I just want one to be a simple phone that works quickly without causing problems and I'm happy enough to be without the extra features available. I've had mobiles since about 1990 and the only new feature I really want is the flip-top so I don't accidently answer it in my pocket.

    11. Re:That is why... by Anonymous Coward · · Score: 0

      1) There is a big difference between email and phone. Email is an asynchronous system, I send you something but don't expect you to reply back immediately. Phone is a two-way conversation, we talk on it. Sure you can redirect all calls to voice-mail, but where is the fun in that.

      2) With email you can have spam filters etc. Just about all email readers are fitted with spam filters. But millions of household phones are not equipped with firewalls and filters. When your cousin gets a virus on their cell phone that starts calling your parents' home phone repeatedly, how are you going to stop the constant ringing? Hmm?

    12. Re:That is why... by Hobbex · · Score: 1


      Sure, they should sell phones that are everything they could possibly be. They also should sell simple phones for people like me who don't want shortened battery life, slower operation, increased likelyhood of failure, to have to "update" software, to have to leave my phone everytime I enter a secure area because of the camera, more complex interface, risk of viruses or any of the other reasons there are for not wanting more complicated phones.


      Here: no java, no camera, no color screen. I could find a hundred other simple phone models, and they are considerably cheaper then those with all the latest features.

      So what are you whining about exactly?

    13. Re:That is why... by NanoGator · · Score: 1

      "This is why a phone needs to be just a bloody phone."

      No, it's not. There are actually people out there who would like their phone to be a PDA / Web browser / game machine. I don't know when it became popular opion here that cell phones shouldn't do the cool things we all want a PDA to do, but I can't believe this type of comment is being modded up. I don't recall people getting modded up for saying viruses are a reason why computers shouldn't be able to get on the net.

      "I don't like cell phones, mod me up!"

      --
      "Derp de derp."
    14. Re:That is why... by Anonymous Coward · · Score: 0

      If you want a PDA/Web browser/game machine that also does calls, why not have a PDA with a cellular interface card?

      The problem is a cell phone is an idiotic device to converge around. It's just a bloody network interface. Converge around something more general purpose! I don't see anyone trying to turn an ethernet card into a PC.

    15. Re:That is why... by NanoGator · · Score: 1

      "why not have a PDA with a cellular interface card?"

      1 device instead of 2.

      " I don't see anyone trying to turn an ethernet card into a PC."

      A.) They're not trying to turn it into a PC. They're trying to turn it into a PDA, and frankly they're not doing that bad of job.

      B.) Since a cell phone goes with people everywhere it is a PERFECT device to put some useful functionality. You won't get the best experience in the world, but at least you won't look like a Borg when you've got your PDA, digital camera, Mp3 player, Game Boy, and tape recorder stuffed into the appropriate pockets.

      --
      "Derp de derp."
    16. Re:That is why... by Launch · · Score: 1

      You're right, if technology doesn't exist today to take care of the problems of tomorrow we probably shouldn't go foward with it. I mean, I always hated inovation too.

      --
      Your mammas flamebait.
    17. Re:That is why... by pacman+on+prozac · · Score: 1

      So what are you whining about exactly?

      This modern fangled technology.

      That phone isn't a fliptop either, since theres hundreds of other simple phone models your point would have been better proven by picking one with the single feature I do want :p

  16. clarifications by YouTalkinToMe · · Score: 5, Informative
    Some clarifications, for those who don't read the article:

    1. It was not a virus. A pirated version of a game included malware that SMS'd a phone number without the users permission.

    2. The malware was not added by the people who pirated the game. Interestingly, it was an intended feature of the game, included by the company.

    3. The original intent of the malware was to secretly "phone home" when a pirated version of the game was being played. Because of complaints, they removed this "feature" from later versions. The pirated version was old, and still includes the "feature".

    What I find interesting is that they included such a "feature" to begin with.

    1. Re:clarifications by gbjbaanb · · Score: 1

      strangely enough, I cut and pasted parts (ahem) of the original article I read. I didn't add much myself. The BBC article has since been updated.

      So, in this case, you can't read the article :)

    2. Re:clarifications by stratjakt · · Score: 1

      I find it possibly illegal they could include this feature. Where's this company based?

      I mean, if Doom 3 started calling 1-900 numbers because I had to crack it since the braindead copy protection won't let me play my original copy, I'd personally hunt Carmack down and string him up. Unless he GPL'ed the source code, of course, which would make it inherently "good".

      --
      I don't need no instructions to know how to rock!!!!
    3. Re:clarifications by NanoGator · · Score: 1

      "I mean, if Doom 3 started calling 1-900 numbers because I had to crack it since..."

      "That's just another reason why computers shouldn't have modems!!!!!!!" (Score 5, Insightful)

      --
      "Derp de derp."
  17. Not true, actually copy protection mechanism by lonely · · Score: 0, Redundant


    See the reg:

    http://www.theregister.co.uk/2004/08/11/mosquito s_ malware_myth/

    Move along nothing to see here!

  18. My mobile has a virus.. by grunt107 · · Score: 3, Funny

    This virus causes 1-900 numbers to be dialed and connected for more than 1 minute (sometimes as long as 2 minutes).

    1. Re:My mobile has a virus.. by Technician · · Score: 1

      This virus causes 1-900 numbers to be dialed and connected for more than 1 minute (sometimes as long as 2 minutes).

      Contact your provider. Most offer a plan that disables 1-900 calls. I have no reason to call the toll numbers. Other family members use the phone. No need for expensive suprises.

      If you need to use 1-900 numbers, consider having it only on the land line. POTS phones don't run games and trojans.

      (I know it's humor, laugh)

      --
      The truth shall set you free!
  19. There by design ... by PReDiToR · · Score: 5, Informative
    From The Register.

    Mosquitos smartphone 'Trojan' there by design By John Leyden Published Wednesday 11th August 2004 13:31GMT The Mosquitos Symbian dialler Trojan is not really a Trojan horse after all.

    Many news outlets, including ourselves, reported that a trojanised version of Mosquitos game for Symbian Series 60 smartphones was circulating online and across P2P networks. Cracked versions of the game secretly sends SMS messages to premium rate numbers, according to reports on various online forums.

    Illegal copies of the game display the following message on start-up: This version has been cracked by SODDOM BIN LOADER No rights reserved. Pirate copies are illegal and offenders will have lotz of phun!!!

    Yesterday Symbian put out a statement which contributed to the impression that malign code was inserted into 'cracked' versions of the game by members of the computer underground. However it turns out that the hidden SMS functionality, along with a message written in the best vernacular VXer speak, was put in the game from the beginning by the original games publisher Ojom.

    In an advisory, AV firm F-Secure explains: This functionality was intended to be a copy-protecting technique - it didn't work as planned and the whole functionality backfired.

    The premium rate contracts for the phone numbers have been terminated, so although old versions of the game still send hidden SMS messages, it only costs the nominal fee of sending the message itself. Current versions of this game no longer have this hidden functionality, but 'cracked' versions of Mosquitos still float in P2P network - and they still send these messages, it adds.

    So what appeared to be a Trojan is actually a rather sneaky and somewhat ineffective copy-protection technique. Proof that even if something looks like a duck, talks like a duck and walks like a duck it isn't necessarily Anas platyrhynchos.

    Although the Mosquitos saga turns out to be an urban myth, the recent discovery of the first malware capable of infecting smartphones shatters the comforting belief the mobile phones are safe from viral infection. The threat is very low at present but shouldn't be completely discounted. ®

    --

    Do not meddle in the affairs of geeks for they are subtle and quick to anger
  20. "Destructive"? by Samurai+Cat! · · Score: 3, Informative

    Nowhere in the article is that term used. And the description of the virus doesn't sound like it causes "damage" at all. The submitter's info leads one to believe the phones are made unusable.

    Editors, please edit before posting these stories. :)

    --

    "People" using "unnecessary" quotes should be "shot".
    1. Re:"Destructive"? by LurkerXXX · · Score: 1

      The damage is to your wallet. Then again, if you are installing pirated software, you might just deserve the damage.

    2. Re:"Destructive"? by Anonymous Coward · · Score: 0

      Then again, if you are installing pirated software, you might just deserve the damage.

      And if a thief breaks into your house they might just deserve to be electrocuted? I believe our society has advanced beyond that point. At least outside USA.

      If you find someone breaking the law, you must report them to the authorities who will deal with them in a just manner. You may not punish them yourself, that would make you the judge, jury and executioner, not the sign of a modern civilization.

    3. Re:"Destructive"? by Anonymous Coward · · Score: 0

      If a thief breaks into someones house in Texas, they are looking to get shot. I don't have a problem with that. Being a thief is not very civilized.

    4. Re:"Destructive"? by Anonymous Coward · · Score: 0

      "People" using "unnecessary" quotes should be "shot".

      Ironic, isn't it?

    5. Re:"Destructive"? by Anonymous Coward · · Score: 0

      The word "destructive" is not used. What the
      program does is send out lots of SMS messages,
      which can cost around 10 cents each. This adds up quickly.

      You don't think getting hundreds of dollars on you phone bill is destructive?

    6. Re:"Destructive"? by Pantero+Blanco · · Score: 1

      I don't agree with the post you're replying to (software pirates aren't burglars), but if a thief breaks into a house, they have only themselves to blame if they get shot by the owner, get electrocuted by a security mechanism, or trip over the cat and break their neck.

      Now, if the owner has the thief cornered and gets him to surrender, THEN shoots him, the owner is in the wrong. But while the thief is still a potential threat, or if the thief is in the process of escaping with stolen items, he's fair game. The owner of the house isn't acting as judge, jury, or executioner...He's acting as someone who doesn't want to get robbed, killed, raped, or any combination thereof.

    7. Re:"Destructive"? by Anonymous Coward · · Score: 0

      That was the point, I believe.

  21. good by Anonymous Coward · · Score: 0, Redundant

    cel phones are for communications, not for playing games.

    1. Re:good by fondue · · Score: 1

      My paychecks seem to disagree.

      --

      Preferences > Homepage > Customize stories on homepage > Authors > Zonk > Uncheck

  22. Welcome to the 21st Century by LanMan04 · · Score: 5, Insightful

    As much of a technophile as I am, I'm starting to see a disturbing trend in technology...nifty new technology that's supposed to make your life more convenient (TiVO, VoIP, multi-function cell phones) almost always end up having problems, and end up creating a lot of stress and headache (although whether this negates the device's 'usefulness' is debatable, obviously). We've had telephones for quite a while now, same thing with cars, TV, etc, but all of a sudden there are troubleshooting prodecures for everything.

    I don't want to live in a world where I have to download patches and updates for my phone, TV, cell phone, alarmclock, bathroom scale, toaster, fridge, etc, every other week, or worry about them charging me money or disclosing private information. Some things work just great already and don't need all sorts of crazy upgrading, networking, or convergence. If you had a portable game thingy (not connected to any network) to play 'Mosquitoes', you wouldn't have to worry about this!

    --
    With the first link, the chain is forged.
    1. Re:Welcome to the 21st Century by Tim+C · · Score: 1

      If you had a portable game thingy (not connected to any network) to play 'Mosquitoes', you wouldn't have to worry about this!

      No, then I'd have to worry about

      a) yet another gadget to pay for
      b) yet another gadget to lose, break, have borrowed by my daughter, etc
      c) yet another gadget to cart around with me

      I have a 'phone. It plays games, makes calls, takes pictures, etc. It does all of these things adequately. No, the games aren't amazing - I have a PC for that. But when I'm at a lose end and feel like playing something quickly, it's great. Similarly the camera isn't the best quality, but it's convenient and great for snapshots. If I was going on holiday/sightseeing, I'd take my digital camcorder with me.

      I don't want to live in that world either, but nor do I want to live in a world where I have to carry a separate gadget with me for all the things I may want to do. I carry quite enough crap with me as it is. And really, why would your toaster or alarm clock even be networked, let alone store sensitive information or be able to charge you for anything?

    2. Re:Welcome to the 21st Century by LanMan04 · · Score: 1

      Yes, it's true you would have to worry about carrying around another gadget, but at least a gadget to play downloaded games from an untrusted source can't make phone calls that cost you money. It's called seperation of privilage, and if one device does everything all you have to get it one bad apple application and you're toast.

      This is why Microsoft software can be exploited with such great success, becuase all the applications are tightly bound together, making it easy for an attacker to write an ActiveX contol on a web page that then talks to Outlook and harvests email addys, then goes over your SAM file and extracts your password hash for offline cracking, etc. Maybe better software sandboxing can fix this, but I want a phone with all the code in ROM or flashed in by the manufacturer, so it's a nice, controlled environment.

      It's a trade-off between convenience and security. The more features you add, and the easier it is to use those features ("Download untrusted game content? OK!"), the more trouble you can get into. Some day when you have an electronic wallet will you play untrusted games on it, allowing it to send all your money instantly to some guy in Romania? It's a matter of putting all your eggs in one basket.

      And yes, I can imagine a networked toaster than can download new images to burn on your toast via a matrix of grid elements (I've already seen this in the "Hardware Hacking Projects for Geeks" book, what if they commercialized it and you could download image files?), and what if you had an alarmclock that would wake you up earlier if there was bad traffic? Those are both strong possibilities; after all, 15 years ago who would have thought we'd have TiVO, all they could imagine would be feasible would be a VCR at that point.

      --
      With the first link, the chain is forged.
    3. Re:Welcome to the 21st Century by LanMan04 · · Score: 1

      Sorry, I realize this post came off kind of negative. I totally agree that having a phone that plays games and does internet- stuff is handy, heck I read the news on the bus on the way to work on my krappy Sprint phone, but when everyone jumps on the bandwagon without any real thought to how the devices work, that's when the trouble starts. Kind of like how it's now accepted practice to "turn off anti-virus software when installing this program", what if that program installs a virus?....no one thinks about that. Being responsible and mindful of the stuff you run is important.

      Plus, I'm just sick of simple devices being upgraded into uselessness. My cell phone occasionally crashes and I have to pop off the battery to reboot it....that just sucks, it's a cell-phone for christ sake, not a full-fledged operating system. They should some better embedded system programmers.

      --
      With the first link, the chain is forged.
  23. Meh. Does this surprise anyone? by SeanDuggan · · Score: 1

    Honestly, after they release a news story detailing a virus and how it spread, how long did they expect it to take for someone to attach a damaging payload? *wry grin* It's that dual problem that if you report details of the threat, someone's bound to use them, but if you don't list details, people may not know how to protect themselves. Still, you'd think they'd give the phone companies some lead time to plug holes before releasing it in public back when it was still a fairly innocent payload. If I were more paranoid, I might wonder if they didn't announce it knowing that it would create more news that way.

    --
    This sig has absolutely no significance and serves only to take up screen space and waste the time of the reader.
  24. Applications can access all phone functions? by hattig · · Score: 5, Insightful

    Does allowing an application to send a text message strike people as being a pretty bad design decision?

    Phone applications/games should not be able to access any function that might cost the user money. Or if they do, then the OS itself should intercept and ask the user if they wish to allow the application to send the SMS / phone call / data call. "PsychoSolitaire wishes to send a message to +XX.YYYYYYYYY. This will cost £x. Yes/No/Never"

    That is just sensible and obvious design.

    1. Re:Applications can access all phone functions? by Knights+who+say+'INT · · Score: 1

      My el-cheapo Nokia 1800 does that. Then again, it's very simple, but it has an option so that no money-costing message ever gets sent without double confirmation.

    2. Re:Applications can access all phone functions? by DaHat · · Score: 1

      No. If I run software on my phone I want it to be able to have access to any features of the phone.

      Your logic of blocking is not unlike saying "Modern operating systems shouldn't allow an application to dial a 900 or long distance number with out the user giving permission"

      This is a fine idea in theory, but creates an unnecessary burden for the software user. Of course... there is nothing to stop a software programmer from automatically clicking the yes button of the OS generated dialog box as some applications already do to circumvent built in security methods.

    3. Re:Applications can access all phone functions? by endoboy · · Score: 1
      If I run software on my phone I want it to be able to have access to any features of the phone.

      you may want to reconsider--"delete all contact numbers", for instance, is a pretty standard phone feature.

    4. Re:Applications can access all phone functions? by Beryllium+Sphere(tm) · · Score: 1

      According to the ancient security principle of "least privilege", the application shouldn't be able to do anything it's not designed to do.

      The right way to do this isn't to drive the user up the wall. It's to give a permission set to the application. Tetris would ship with call-900-number set to DENY, Pr0nDialer would have it set to ALLOW, user would get one choice on installation: "This program wants the authority to spend your money. Is that OK?".

      A secure system needs a reference monitor to check every use of a protected resource for permissibility, but that doesn't have to work by asking the user.

    5. Re:Applications can access all phone functions? by JaxWeb · · Score: 1

      "PsychoSolitaire wishes to send a message to +XX.YYYYYYYYY. This will cost £x

      Some do. aside from the cost part (Which it could not possibly have known - it would require knowledge of my tariff, of how many texts I've already used, my location and the location of the target phone, and if it is a primer rate number).

      It is useful in some ways to allow programs to do this. For example, there are Java ICQ clients available. These need to use whatever Mobile Internet services you have available. So long as the phone asks, there are no problems.

      So no, allowing a program to send a text message isn't a bad idea at all. In fact, not allowing it might remove some useful uses of applets.

      --
      - Jax
  25. Slashdot vs. Article by DynamicBits · · Score: 5, Funny

    Slashdot:
    "First Destructive Mobile Phone Virus In The Wild"
    "...a hidden program sends SMS texts to premium rate numbers."

    Article:
    "...text messages will still be sent, although not at premium rates."
    "Mosquito's Trojan does not do any other damage..."

    Does anyone verify that the slashdot article actually represents the real article?

    1. Re:Slashdot vs. Article by stratjakt · · Score: 2, Insightful

      It sends to premium rate numbers, those numbers have been terminated, so at present it sends at the regular rates, which so far as I'm concerned, are premium enough.

      If jacking your mobile bill 100 bucks a month isn't "destructive" enough for you, then, there's nothing I can do about that.

      --
      I don't need no instructions to know how to rock!!!!
    2. Re:Slashdot vs. Article by garcia · · Score: 2, Informative

      Article:
      "...text messages will still be sent, although not at premium rates."
      "Mosquito's Trojan does not do any other damage..."


      Most people I know here the US do not have unlimited SMS plans. Most people don't know much about text messaging at all. So these people would be sending SMS messages out and being billed for it regardless of the numbers being "premium rate" or not.

      Thus it does do damage as your bill goes up that month.

    3. Re:Slashdot vs. Article by NeoSkandranon · · Score: 1

      Perhaps one would learn quickly not to pirate software if that happened more often

      --
      If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
    4. Re:Slashdot vs. Article by nizo · · Score: 1
      Does anyone verify that the slashdot article actually represents the real article?

      Yes, if by represent you mean "vaguely resembles" and by real you mean "lunatic interperatation inside some readers head". But the slashdot headline grabs your attention better than the more accurate "'Game virus' bites mobile phones" title that the BBC used I suppose.

    5. Re:Slashdot vs. Article by Anonymous Coward · · Score: 2, Insightful

      Frankly, if everyone that pirated software got $100 tacked onto their phone bill, I'd dance in the streets!

    6. Re:Slashdot vs. Article by chaosmage42 · · Score: 1
      --

      done
    7. Re:Slashdot vs. Article by zCyl · · Score: 1

      The reason the articles are so often distorted is simple. Slashdot editors reject submissions that just provide the facts, and accept articles that are emotionally rousing. A lot of the time, the true story is more fact that emotionally rousing, so the article submission doesn't match.

      This isn't so different from mainstream for-profit news.

    8. Re:Slashdot vs. Article by Tokerat · · Score: 1

      "Mosquito's Trojan does not do any other damage..."
      ...other than get you billed a fuckton each month.

      Ahhh... both points refuted! mod grandparent into the ground. ;-)
      --
      CAn'T CompreHend SARcaSm?
    9. Re:Slashdot vs. Article by Anonymous Coward · · Score: 0

      Does anyone verify that the slashdot article actually represents the real article?

      Certainly not timothy....

    10. Re:Slashdot vs. Article by Packets · · Score: 1

      Thats an irresponsible position to take on the issue. Every single one of my coworkers reads the front page of slashdot, rarely will they click through to read the comments or the full article.

      This kinda shit just makes me sad.

      http://alterslash.org/ is where I read slashdot - saves me the clickety-clicking to see comments.

      --
      A little overkill never hurt anybody.
  26. Who says it's a failed system? by Anonymous Coward · · Score: 0

    If the game development company included this "call home" function in order to catch people using pirated copies and only pirated copies are being infected does it not stand to reason that the game company is getting what they want ie. the decreased usage of pirated versions. It may just be their system in action.

  27. He said it does it. by burgburgburg · · Score: 1, Insightful
    He said nothing about it doing it well.

    A fairly important distinction.

  28. RTFA by sploo22 · · Score: 5, Informative

    The submitter DID NOT read the article AT ALL, and apparenty neither did the editors.

    First of all, it specifically says that the phone DOES NOT text premium numbers. The problem is NOT a virus; it's not even really a trojan. It's a feature that "calls home" in case it's an unlicensed copy. Not only that, the feature was removed in later versions; the cracked version was older. They got what they deserved.

    --
    Karma: Segmentation fault (tried to dereference a null post)
    1. Re:RTFA by aallan · · Score: 1

      The submitter DID NOT read the article AT ALL, and apparenty neither did the editors.

      Unfortunately you're wrong, the article on the BBC site has been "updated" since the story was initally posted. The BBC have a tendency to update their articles to correct factual errors, without actually telling you they've done it, or archiving the original (unmodified) article. If you think about it, it's actually quite scary...

      Al.
      --
      The Daily ACK - Eclectic posts by yet another hacker
  29. And that's why... by lukewarmfusion · · Score: 4, Funny

    I'm still using my telegraph.

    Clickity-click-click!

    1. Re:And that's why... by Anonymous Coward · · Score: 0

      Awesome

    2. Re:And that's why... by Idarubicin · · Score: 1
      Clickity-click-click!

      3?

      What the hell is that supposed to mean?

      --
      ~Idarubicin
    3. Re:And that's why... by Anonymous Coward · · Score: 0

      That's easy. It stands for: W. (If clickety is a short and click is a long)

    4. Re:And that's why... by Anonymous Coward · · Score: 0

      He thinks he's safe, but just wait until I plug the telegraph wire into a wall socket.

  30. Cell Phone viruses by !Squalus · · Score: 4, Insightful

    How droll. As a former AV employee, I wonder just how the hell you are supposed to run AV on something meant for phone calls? This stupidity will never end. Next,, you will need that really cool 3D screen and a better graphics card, and then a patch for that virus, and then a controller, and a patch for that virus....

    Just yesterday I saw an article that said Open Source wasn't ready for Antivirus software. Well - duh! It isn't all that necessary - yet. Most viruses are ineffective on Linux/Unix/BSD/OS/X because of FHS standards, rights and permissions.

    Cell phones that play games are about as useful as the teats on a boar hog (and that is a colloquialism). It's the same old game - sell them a useless but "neat" feature that violates sensible security and then sell them a patch to correct that stupidity that they have to buy and buy and buy.

    If you spend your money that way - it's your choice really, now isn't it?

    --
    All Ad hominem replies happily ignored as the sender shall be deemed to lack the faculties to comprehend the equation.
    1. Re:Cell Phone viruses by BCW2 · · Score: 1

      You got it. Have you seen the size of some of these bloated , so called, phones? Might as well go back to the bricks of 15 years ago. Anyone who thinks a phone is a good replacement for a laptop (that is where this is headed) or PDA is a fool. The dinky little screen will never cut it.

      --
      Professional Politicians are not the solution, they ARE the problem.
    2. Re:Cell Phone viruses by RU_Areo · · Score: 1

      I whole heartedly agree. Cell phones have become so ridiculously engrained in modern day society, it is a wonder the people before us, who built the cell phone companies were able to get along without them. a cell phone is (or at least should be) a phone, all the rest is waste of time and money. Not to sound regressive, but everything has it's function.

    3. Re:Cell Phone viruses by argent · · Score: 2, Interesting

      The requirements for a virus or a worm to spread are (a) a place for the virus to hide, (b) a way for the virus to copy itself to the victim, and (c) a way for the virus to launch on the victim. Note that "bypass local OS security" isn't on this list.

      Client file system protection makes (a) harder, but it doesn't prevent it... I suspect it's impossible in principle to prevent (a) short of running everything in a sandbox that's destroyed when you quit using it. The biggest advantage that open source systems have is that they make (c) harder... you don't have to depend on the vendor recognising and fixing security holes and design flaws... or refusing to fix them for tactical reasons.

      This is just another reason for me to carry a cheap dumb phone and a separate PDA that's only in communication with the rest of the universe while I'm actively using it for that purpose. That makes requirements (b) and (c) dependent on my doing something stupid.

    4. Re:Cell Phone viruses by plumby · · Score: 4, Insightful
      Cell phones that play games are about as useful as the teats on a boar hog

      I love this "I don't want the feature, so it's obviously useless" attitude on Slashdot. Games on phones may be useless to you, but I and, evidently by the number of games purchased, many other people find games on phones useful. I often find myself waiting around somewhere (pub, meeting room, bus etc) and carrying very little in the way of entertainment except my phone. So being able to have a quick game of chess, or whatever, is a great way to pass the time.

      Sure it's something I could live without (as is pretty much every gadget that I own), but that doesn't mean it's not useful.

    5. Re:Cell Phone viruses by !Squalus · · Score: 1

      Okay, just one question. While you are waiting, have you ever thought of talking to people around you? There is this thing called the physical world, with, um, you know, people?

      Just a thought.

      --
      All Ad hominem replies happily ignored as the sender shall be deemed to lack the faculties to comprehend the equation.
    6. Re:Cell Phone viruses by Beryllium+Sphere(tm) · · Score: 1

      As a matter of perspective, I've heard people say that a portable phone is pointless because you can just pull over and find a phone booth.

      The line between "convenient" and "necessary" shifts over time. A building today isn't up to code unless it has electric wiring. 150 years ago no building did: were they uninhabitable?

    7. Re:Cell Phone viruses by fondue · · Score: 1

      I'm guessing you don't use public transport very much.

      --

      Preferences > Homepage > Customize stories on homepage > Authors > Zonk > Uncheck

    8. Re:Cell Phone viruses by TheSync · · Score: 1

      I used to think this. Now I play Reversi whenever I am stuck somewhere. Of course, I'd prefer Web connectivity...

    9. Re:Cell Phone viruses by Anonymous Coward · · Score: 0

      Come to New York and try doing that on the 6 train at rush hour. Good luck!

  31. Redundant. by hot_Karls_bad_cavern · · Score: 1

    i know i (you) have heard it many times: network it and it'll never be 100% secure.

    This on the tail of the viop spam-fest looming; yeah, fun times ahead for phones. i can't wait for the convoluted, mostly-useless, loophole-for-biz laws that will follow all of this once lawmaker's underlings get wind of it.(you don't really believe most lawmakers have a clue about the tech-laws they pass do you?)

    bah! i need a firewall for my phone now as well!!?? heh, i'm sure there'll be plenty of money made for lots of parties that aren't me and my phone(s) :(

    And yes, it's alread been pointed out, the massive errors in the /. post about this, but i felt the need to bitch a little (it is /. you know! ;-)

  32. Hmm... looks like someone didn't read article 1st. by digital+photo · · Score: 5, Informative

    Well, either the original article was changed or the article poster didn't really read the article to being with. :( In either case, that's kinda sad.

    • Trojan, not virus.
    • No destruction ensues.
    • Not premium numbers.
    • Trojan was not added by crackers or even a malicious writer, but was an anti-piracy feature.

    Though I'd thought that the crackers would have spotted their cracked software doing something unintended...

    Interesteding historical tidbit... the Pakistani Brain virus was written with a similar anti-piracy intent in mind. Though that was a virus and spread destructively. This is just a trojan which is annoying.

    If a writer really wanted to be destructive, they would have overwritten the Symbian OS boot code and firmware loading codes and executed a phone reboot. (nevermind the sim card and access to other data cards inserted into the phone)

    Kinda makes me reconsider getting a more powerful phone... :(

  33. I hope we see more of these. by Anonymous Coward · · Score: 2, Funny

    Maybe it will convince someone that there is a market for cell phones that actually let you send and receive calls.

  34. heh, yeah, that's new to me too...make that voip ;-) i need my coffee dammit!

    ...which i just got up and made durring mah 2 min repost wait! heh.

  35. Attention all Orange customers by rokzy · · Score: 3, Informative

    I advise you to turn off automatic MMS download if you have not already done so.

    Orange sends crap to your phone such as trailers for Catwoman.

    The "do not download if bigger than x kb" defaults to 100k but Orange will send 99.9Kb files to bypass this.

    Once again the best thing is to deactivate automatic downloads of messages.

  36. Yes, but... by Anonymous Coward · · Score: 0

    ...how many of your "Anytime Minutes" (or whatever) are lost because your color screen, camera, MP3 player, DVD player, and electric can opener drained your battery?

    1. Re:Yes, but... by Anonymous Coward · · Score: 0

      guess what? the batteries are RECHARGEABLE! and guess what also? the more expensive phones with more features also have BETTER BATTERIES.

      it's only a problem if you're too poor to afford a good phone but that's always been true.

    2. Re:Yes, but... by BarryNorton · · Score: 1

      I'm not sure if my phone's ever been off, in fact!

  37. mod parent -1, Luddite by rokzy · · Score: 1

    and a computer should only be an unsigned integer adding machine god damn it!

    1. Re:mod parent -1, Luddite by Anonymous Coward · · Score: 0

      Unsigned what? I say we stick to punch card Turing machines!

  38. Out of date already. by CountBrass · · Score: 2, Informative


    The Reg has the correct story. In short, it was deliberately done by the developers of Mosquito as a crappy kind of copy protection: copy our software and we'll send SMS messages to premium rate numbers. Now someone tell me this isn't illegal...

    --
    Bad analogies are like waxing a monkey with a rainbow.
    1. Re:Out of date already. by hsoft · · Score: 1

      Great. Thus, infected people are people who download cracks. They deserve what they got.

      --
      perception is reality
  39. Nokia vs. motocrap by autopr0n · · Score: 1

    I had an old nokia 8620. Solid phone, had a snake game. It died, and although I had insurance I needed a new phone right away (I was trying to get a job -- which didn't happen). so I ended up signing a new 2 year agreement just to get a free phone immediately.

    The thing I have now is loaded with features, but the basic interface is shit. The most annoying thing -- The ringer is to quiet, and I can't set it to ring and vibrate at the same time. I miss calls when I'm listening to loud music, now, that I would have at least felt otherwise. and I miss calls simply from the phone being to quiet. The thing seems to last about a third the time of the nokia on a full charge, and takes 3 times as long to get there.

    On the old nokia I could hit the power button to turn on the backlight without popping up the 'the keys are locked' dialog. On this phone, you can't see the display at all without turning on the backlight, day or night, and the keylock warning show up no matter what.

    Its like they didn't even have people using this phone for a while before they just tossed it out there. The amount of thought that nokia obviously put into their handset is clear.

    OTOH, nokia's design esthetic has just gone way overboard lately.

    --
    autopr0n is like, down and stuff.
    1. Re:Nokia vs. motocrap by Tongo · · Score: 0, Offtopic

      Speaking of the ring and vibrate at the same time. WHY THE FUCKING SHIT do they have it ring once or twice before vibrating on the newer phones. Like the parent said, you'll be listening to music, it'll vibrate once and by the time you can answer it, the call has gone to voicemail. FFS how hard is it to do both at the same time?!?!?

    2. Re:Nokia vs. motocrap by wo1verin3 · · Score: 0, Offtopic

      My Samsung A520 has a vibrate with no ring, and a vibrate with ring... take your pic.

    3. Re:Nokia vs. motocrap by JaxWeb · · Score: 1

      Sounds like you have a Samsung there.

      I've had both a Nokia (Ages ago, it was the 3210 which was good for its time), a Sony Erikson (T610) and now have a Samsung D410. Although the Samsung is the best for hardware, the software is just not as good as the other two. In fact, Sony Erikson are by far the best software creators of the three phones I have.

      The Sony for example would prompt you before a Java program could use any services (Be it the internet, or texts, or whatever). I know a lot of other phones don't (From reading the API docs) - that would make this virus useless.

      The most annoying thing about the Samsung is it starts text messages in capital letters - without option. It's these sort of mistakes which make the phone annoying to use, despite its superior hardware. The vibrate and ring missing feature you mentioned is annoying and as far as I can see just an oversight. Lack of Bluetooth is annoying too.

      With so much money at stake, you wonder why they can't spend more time on the software - although in the end I think the reason is that you can't use software as one of the reasons on buying a phone, so they can get away with it.

      Open Source would be so much better...

      --
      - Jax
  40. Destructive by Anonymous Coward · · Score: 0

    The crack Slashdot editors are smoking is "destructive" to their brains.

    Did any of you morons actually read this before posting the headline?

  41. Can't Wait by icekillis · · Score: 0

    Oh! I can't wait until I download McCafee for my mobile phone. Maybe soon they will offer an antivirus for my MSN DIRECT SPOT Watch!

  42. I am surprised.... by Hits_B · · Score: 1

    that no one on /. has figured out a way to blame this on Microsoft.

    1. Re:I am surprised.... by Anonymous Coward · · Score: 0

      no one on /. has figured out a way to blame this on Microsoft.

      Okay here goes:

      If Microsoft hadn't spent so much effort trying to hijack Java only to subsequently promote their own C# technology, we might otherwise be seeing greater acceptance of Java at all levels, including in cell phones.

      With a Java-based cell phone, a downloaded game would not be able to exceed its given priveleges.

    2. Re:I am surprised.... by Anonymous Coward · · Score: 0

      no one on /. has figured out a way to blame this on Microsoft.

      Here's a broader attempt:

      1. The game sends SMS messages as an anti-piracy feature.

      2. Concepts such as "software piracy" are artificial terms, created and coined by the software industry itself in recent years.

      3. The world's largest software company, Microsoft, has played a major role in the promotion of "digital rights management" and anti-piracy causes at both the technological and societal levels.

      4. The producers of the "Mosquito" game added the anti-piracy SMS feature because they believed they had a right to do it, and because they assumed their customer base would not object to it.

      Thus, the SMS feature hidden within the "Mosquito" game are a product of the anti-piracy environment which was created substantially by Microsoft.

  43. Poor design. by emeitner · · Score: 3, Insightful

    They should never allow user software to access the dialing functions. Maybe there needs to be a user/OS partition in the phone so that untrusted software has to run in a small sandbox. The last thing we need is some malware disguised as a cute toy DOSing 911 numbers on a specific day.
    It would be simple to have a popup dialog that would ask the user if they want to allow the app to dial a number.

    --
    Guru Meditation #6d416769.21610a21
    1. Re:Poor design. by glorf · · Score: 1

      So that means you are stuck with the standard software for the phone? What if you want an address book with more features or fields than the default? What if you want something that can do macros or something for 3-way calling? Maybe someone writes a little piece of software to put you in "stealth mode" so that all calls dialed are prefaced with *67. There are legitimate reasons for non-factory software to have access to phone functions. Freedom of choice in software is a good thing.

  44. ngage owners by minus_273 · · Score: 1

    as if it didnt already suck to own an ngage :-p

    --
    The war with islam is a war on the beast
    The war on terror is a war for peace
  45. how about actual buttons. by chadjg · · Score: 1

    Weren't some functions in NT 4.0 accesible only after a hard ctrl-alt-del ? Maybe it's time to build some hard coded, hardware only goodness into mobile OSs. The only way to say ok would be to push an actual, real, clickity-click button.

    Just ignorant speculation here

    --
    Why do I have this? I don't smoke.
  46. sigh by captain1010 · · Score: 1

    Ah... to see the day when phones get security patches...

    An increasingly always-on fully connected array of ever more critical technologies can't help but make one glad that people making machines never make mistakes.

  47. Won't help by Anonymous Coward · · Score: 0

    You see, it doesn't matter that your cell phone just makes calls. It's that all these other phones are on the same network as yours.

    Think of it as being the only Linux box on a Windows network. How much use is that Linux box when all those Windows computers start going crazy?

    1. Re:Won't help by typobox43 · · Score: 1

      Well, your Linux box certainly isn't going to get infected. Sure, there may be more network traffic, but at least no damage will be done.

    2. Re:Won't help by stoborrobots · · Score: 1

      That depends - I think the appropriate metaphor here is that if all the windows boxes are unable to talk because of the network traffic, then you can't talk to them either, anyway...

      In that respect, your machine is just as useless as the infected machines...

    3. Re:Won't help by Kent+Recal · · Score: 1

      then you can't talk to them either, anyway...

      Why would I want my machine to talk to a windows box?
      I couldn't care less what's on the other end. If a host can't take the heat it probably shouldn't try to play server...

  48. Very Funny! by doublem · · Score: 1

    /. editors READ the articles??

    MWHAHAHAHAHA!!!!

    We all know getting your article posted depends on who on the editorial staff you're sleeping with / friends with / cybering with / sucking up to.

    You make it sound like articles should be posted based on merit or relevance!

    You've got a great sense of humor!

    --
    "Live Free or Die." Don't like it? Then keep out of the USA
  49. Shortsightedness by TiggertheMad · · Score: 2, Insightful

    Second, since this only effects people who steal software, why should i care?

    1985: "AIDS? Why do I care? Only homosexuals and junkies get it."

    Your attitude is remarkably self-centered. There are a lot of problems in the world that are aggravated by shortsighted people such as yourself.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
    1. Re:Shortsightedness by Anonymous Coward · · Score: 0

      I blame those god damn bi-sexuals. If it wasn't for them, only gays would have aids.

    2. Re:Shortsightedness by Anonymous Coward · · Score: 0

      Well, only gays and whoever got their infected blood in some manner (via transfusion, by accident, on purpose (stabbed with needle)). And their kids too, some gays are in fact women, you know, lesbians.

    3. Re:Shortsightedness by Kris_J · · Score: 1

      Crappy analogy. Try: "Why should I care that people are sometimes shot and killed by the owner of a house when breaking into it? I don't break into other people's houses". Not perfect, since breaking copyright is not equivalent to burglary, but a lot closer than yours.

  50. Someone shoot the lawyers and reporters by SmallFurryCreature · · Score: 1
    The lawyers just on principle and the reporters for this kind of fabrication.

    It ain't a bloody virus. It ain't even a trojan. It is just piece of malware. It doesn't alter the OS, it doesn't install itself and run always. It just dials phone numbers while you are playing the game. A pirated hacked game.

    Geez when I was young we had real virusses. They infected your machine and the simple act of sharing a floppy would make you catch it. Removing it was hell as any program installed would be infected as well if it could even do something about the boot sector.

    Kids nowadays eh. Got no discipline.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  51. Symbian OS could use built-in protection by UfoZ · · Score: 4, Insightful

    A good feature for Symbian OS would be a sort of "mobile firewall" for user-installed applications, that notifies you before allowing random programs to do things like place calls, send messages or connect to the net (things that cost you money). If the program you're using is legitimate and you're aware of this, a simple OK would authorize the program to do that particular action (say, send an SMS). If the user said no, then the program's request would fail at the API level, no harm done.

    It would prevent this sort of unfortunate situation from happening, because, who knows, the next piece of malware like this might install itsself to run all the time and pump out calls or messages, disable uninstallation or wreak any other sort of havoc.

    Of course, in the end it all boils down to the end user's stupidity in installing and running untrusted programs, but a safety measure like this would be a good "last chance" before any actual monetary damage is done.

    1. Re:Symbian OS could use built-in protection by t_allardyce · · Score: 1

      Its not a good feature, its a vital feature and anyone not implementing it is partly responsible every time a virus comes out that exploits it, its just the most basic common sense.

      --
      This comment does not represent the views or opinions of the user.
  52. Remember the Pakistani Brain? by billsf · · Score: 3, Interesting

    How history repeats. The Pakistani Brain is said to be the first virus 'in the wild' and it is a true virus. Another form of illegal copy protection was tried by a rather respected engineering software company. If you forgot the dongle, the whole LAN (except for the Unix machines) slowed down to a snail's pace. The solution was to re-install Windows95. Even for a small company this was very expensive. The vendor offered a non-protected version to make up for this. They hopefully removed what was probably the first true Windows virus. (True viruses are _extremely_ rare.)

    Is there any question who to sue? Any use of malware for copy protection is unjustified and clearly in violation of the law in most places. This kind of crap has been tried before and it never benefits anyone.

  53. Access any feature of the phone? by hattig · · Score: 1

    Really?

    Mobile phones are coming out now that store your credit card details, and you can use them to pay for goods at suitably equipped terminals. There was a story about it recently.

    So you are happy for an application to access your credit card details, then send them in an SMS to a bad person? All without your knowledge? And you get charged for the text message?

    I want my details secure. I want a secure device. To be honest, I'd rather the OS provider / phone maker / service provider checked all apps and signed them digitally, and the phone only ran apps signed by these entities. It would be a lot harder to get a malicious application onto a phone then. of course that would mean I couldn't download a hacked set of applications and run them for free ... otoh if you do this and one of the apps is trojaned, then you deserve to get owned.

  54. First of its kind by MMaestro · · Score: 1
    the first mobile phone virus that causes damage is out and about

    If its the first of its kind, I'd say its pretty damn newsworthy. The first nuclear bomb was pretty damned crappy by today's standards but anyone who thinks they're a WWII buff knows its name, the bomber that carried it, and the name of the bomber.

    It'll be like this as long as the media is around. 'The first man to orbit the Earth from outer space.' 'The first man on the moon.' 'The first time a U.S. President choked on a pretzel.' 'The first time man lands on Mars.' '... Pluto' '... Alpha Centauri' etc etc etc.

    1. Re:First of its kind by Svennig · · Score: 1
      No, my point is that this Isnt a virus, and its not anything special.

      If using windows, go to a command console and type format c:\. Linux? rm -rf /.

      Is what I did there a virus? I exectuded code of my own volition. We've had the power to destroy computers through our own malice/stupidity for eons, this is no different. Why do I care that I could damage my phone by running code, because thats what this is. Its stupidity on the part of the user, not malignant self propogating code.

  55. Correction to story posted at The Register by richardbowers · · Score: 2, Informative

    According to the Register, the number dialing out of the game Mosquitos isn't a trojan using the game, it is the game. Some brilliant developer thought this was a good way to punish people who pirate the game, and they built it in as a feature.

    --
    Law is whatever is boldly asserted and plausibly maintained. -- Aaron Burr
  56. "Real" world meets digital world by Anonymous Coward · · Score: 0

    I am a microbiology PhD student working on mosquito borne viruses.

    I think it's pretty awesome that the first destructive mobilephone virus is an "Arbovirus" (arthropod-borne virus) since it's attached to a game called "Mosquitos"

    Let's just hope nobody works on digital viruses like Dengue, JE, or the current media darling West Nile.

  57. Fingers pointing - wrong direction by t_allardyce · · Score: 3, Interesting

    Of course all fingers will be pointing at the authors, and even though they are assholes, the real problem is not in this 'virus' its in the the phone or the OS - it simply should not be letting add-on software have access to the sms functions! its just like the whole outlook crap. Lets say you give your plane passengers a network they can plug their laptops into to use the net, you dont then connect that network to the planes' own bloody computers and let anyone have access to the "flying the plane" functionaliy, its just stupid and if you did that and someone plugged in their laptop and said "hey look at this, i think ill fly this plane and crash it" as much of an asshole as they are it would still be your fault. This sort of stupidity has to stop - sue the people responsible.

    --
    This comment does not represent the views or opinions of the user.
  58. Oblig. Garfield... by Gamasta · · Score: 2, Funny

    John: Garfield, you can be very destructive...
    Garfield: I can?
    John: I wasn't giving you permission!
    Garfield: too late, I already broke something...

    --
    reason defies logic
  59. one question that isn't asked nor answered here... by schatten · · Score: 1

    Is the game any good?

  60. Welcome to the law of unintended consequences by Anonymous Coward · · Score: 0

    gg

  61. "In the Wild" by Embedded+Geek · · Score: 1
    Is it just me or is using the phrase "In the Wild" to describe the "ecosphere" a virus inhabits specious? I mean, who but a niche of technophiles (virus experts, IT pros, and slashdotters - I'm as guilty as anyone) could describe the greatest concentration of computing and telecommunications hardware ever assembled by civilization as "the wild."

    I understand the attraction of the term because it helps describe an environemnt over which anti-virus folks have no control, but maybe we should all take some time and go outside once in a while.

    --

    "Prepare for the worst - hope for the best."

  62. smartphone? by Anonymous Coward · · Score: 1, Informative

    1) Series 60 is Nokia's "version" of Symbian's OS, so not really the same thing.

    2) All Nokia Series 60 phones are "Smartphones".

    3) The "virus" is actually trojan, it doesn't distribute itself, the user has to download and install it themselves.

    4) When the message is sent, the user is prompted each and every time for permission to access the network.

  63. Two words by hummassa · · Score: 1

    BUFFER OVERFLOW.
    Yes. The plain text SMTP mail client in your phone may be infected by a virus-type code injection via a buffer overflow. The Bluetooth stack (if existing) can be infected this way too, and security flaws can be exploited from 50m (150ft) away, using a properly shaped antenna.

    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
  64. New slogan! by Anonymous Coward · · Score: 0

    "Can you hax me now?" - Verizon

  65. Build your own! by Snaller · · Score: 1

    **passes tinfoil hat***

    Don't go without! Build your own!
    http://www.stopabductions.com/

    --
    If Google really cared they would fix Android Chrome to reflow text, instead of discriminating
    1. Re:Build your own! by xp · · Score: 1

      Human brains do many things computers do, require complex software and have always been networked (by definition). How long before someone writes a destructive human brain virus?
      ----
      Turn Work Into A Game

    2. Re:Build your own! by Pantero+Blanco · · Score: 1
    3. Re:Build your own! by Draknor · · Score: 1

      I was thinking something more like this...

  66. DOSing 911 by goatwhip · · Score: 1

    Something like that actually happened in Japan recently:

    The rest of the article talks about many of the different cell phone malwares out there.

  67. Honest to Goodness Truth... by Mr.+Certainly · · Score: 0
    This may be a duplicate...

    Give me a normal phone any day of the week. I'm not CorporateTechMonkey who needs a PDA/Phone/Entertainment Unit/Music Player all in one. Manufacture that crap for those who need all their eggs in one basket.

    The iPod is so successful because it does ONE thing, and does it really well, with little technical experience needed for normal operation.

    Isn't that why we became so dependant on technology? To make things easier? I seem to be fighting more with tech than using it to simplify my life. Between bugs/malware/features/viruses, I struggle against tech more than the overinflated promises of being able "to do more, more easily".

  68. History... by warrax_666 · · Score: 1
    Yeah, and if you did't have a net connection to your computer, you wouldn't get viruses, trojans, or worms.

    Wrongo! I can personally attest to the fact that viruses were rampant in the old Amiga days where our all our data was being moved around on diskettes. So there.
    --
    HAND.
    1. Re:History... by callipygian-showsyst · · Score: 1
      This is a good point that many people forget. Back in 1989 or so, I used to see MANY more viruses on the Mac, all spread via software downloaded on BBSs and on floppy-disks.

      Because the Mac community tended to swap software more (even back then it was like a private club) this stuff spread like wildfire. And the Pre os-X macintosh operating system had absolutely no protection against anything!

  69. RED HAT (COMPLETEY OT) by Sunda666 · · Score: 1

    OMFG that bug report of yours is simply surreal. How can a developer act "there is no bug" like that? it is obviously a (ridiculous) bug.

    I tried to post this there, but apparently I need a 'valid bugzilla account', so, maybe you can do that for me:

    "Guys, this is insane. How can a package installer not check the results of the write() operations it does and abort on errors before making changes to its database it is beyond me. And this developer blaming the users for the problems and closing the bug report is pure nonsense.

    You may flame me, but my advice is to do what I did some time ago. Switch to gentoo and never look back at this mess.

    peace.
    "

    --


    ``If a program can't rewrite its own code, what good is it?'' - Mel
  70. Some carriers make it hard to load apps by juanfe · · Score: 2, Interesting

    I run a developer program for a US carrier. We make it fairly difficult for everyday users to install applications on their phones that have not been blessed/sanctified, particularly to avoid widespread dissemination of things like this.

    We're frequently lambasted on public forums and through nastygrams from folks (mostly developer types) who keep on insisting that these restrictions are unconscionable, that information wants to be free and that they bought the phone and they should be able to do whatever they want to it.

    You can imagine the reception I get whenever I explain that the restrictions are there, in great part, to protect customers from unwittingly loading malware on their phones that would cause them to get ridiculously huge phone bills.

    Mild pleasure to be taken from vindication, I guess.

    --
    ***Foucault is watching you..***
  71. Where have you been? by Anonymous Coward · · Score: 0

    You can't sue anybody.

    You must not be from America.

  72. First reported on Geekzone, reported on InformIT by Anonymous Coward · · Score: 0

    The Register and others linked to a Geekzone thread where the program was first reported. One of our users wrote a report that was later posted on Informit with complete analysis including debug information and posted a reference on Geekzone too.

    I wonder why they did not disclose the source.

  73. coolness wins out over performance by FrankHaynes · · Score: 3, Informative

    I'm well aware of the needed synergy between subscriber equipment and network infrastructure. As another poster mentioned, features like cameras and SMS drive up the traffic to the $$$ benefit of the carriers, so that much makes perfect sense as to why such features are developed.

    What makes no sense is that if the network coverage is suffering from what it could be, I can't take full advantage of these premium services. I can't send you a picture of my--uh, me if I get a weak or non-existent signal.

    Has anyone noticed that newer phones are shaped as pure rectangles? Remember the phones like my ancient, antiquated Nokia 6160 that had a little stub of an antenna sticking out the top? It has better range because of it, but it's not "kewl" so the marketers don't want it. (This came direct from a marketing VP at a major U.S. carrier.) So you drop calls more often so that your phone can look cool. Gee, thanks for that feature!

    This same major carrier even ordered the manufacturer to develop a much more cumbersome keypad layout because they didn't want their phone to look too much like a competitor's model, even though the guts are identical. So now you have to contort your fingers to dial rather than dialing by feel because--ta da--a marketing geek decided what you need, rather than asking you. Back to square one, above.

    There are other issues impacting the basic handling of calls, such as layoffs and cutbacks in the performance departments of some of the major carriers, as well as some clueless upper managers, that prevent them from ensuring better network performance. That much is beyond the reach of equipment vendors, but both sides suffer when either does not maximize its potential performance.

    These computer-like features that will ultimately be used for malware unbeknownst to the user do not improve the phone's performance for me, the forgotten user.

    --
    slashdot: A failed experiment.
    1. Re:coolness wins out over performance by flink · · Score: 1

      Verizon, at least in my area, requires all handsets they sell to have an extendable antenna. Their landline/DSL division may suck, but I've been very happy with Verizon Wireless (I've been on this network since it was called Cellular One, which got eaten by Bell Atlantic, which got eaten by Verizon)

  74. keep the user in the loop by FrankHaynes · · Score: 1

    The user of the phone was not placed in the loop in order to allow or deny the transmission of the text message. For the purposes of the game's author, this would not make sense to notify the user because they thought they were being really clever detecting "piracy" this way, but no application should ever have the ability to do this without the consent of the user.

    I can envision a rare case where someone borrows this guy's phone to make a call, loads the pirated game on it, and the phone's owner has no idea that his phone has now labeled him a pirate, and runs up his phone bill with SMS charges!

    The fact that the phone can perform automated functions without the express consent of the user is the root trouble here, that allows both malware and stupid-ware to do this in the first place.

    Keep the user in the loop, if you know what's good for ya.

    --
    slashdot: A failed experiment.
  75. A trojan, not a virus by DonGar · · Score: 1

    It's not a virus. It's a cracked version of a game that sounds out SMS messages you don't know about.

    If you don't install cracked games, you are safe. I was nervous for a bit.

    --
    plus-good, double-plus-good
  76. From a Symbian developer by GoatSucker · · Score: 1

    Speaking from the point of view of someone who has played with the Symbian SDKs - it's not possible to send SMS's without the user knowing using the standard documented API's. Of course, there are undocumented ways of doing this, which is what the game developers have obviously done, but the average script kiddle will not be able to duplicate this. As far as I know, the next version of the OS will completely sandbox third-party applications from the telephony functions unless the user gives permission.

  77. Cool...does this run on windows as well? by Anonymous Coward · · Score: 0

    Great where can I download my copy? ;)

  78. Re:Great.... a phone! by brindafella · · Score: 1

    My mobile phone is about 5-6 years old. It makes and receives calls!

    I discovered recently that it CAN receive SMS messages, too, when I received a message meant for another number. It was my first SMS, and it said... nothing! (I've never sent an SMS message.)

    Its button area is HUGH -- great for fat fingers. It's battery is HUGE -- bigger itself than most new phones -- but so is its on- and talk-time. The B&W two-line screen is easily read. In short, it's a PHONE!

    Thanks, Nokia, but do you still make phones?

    --
    Looking at space, radio, science and computing from a 'down-under' amateur enthusiast perspective.
  79. Bloody silly Americans again by DABANSHEE · · Score: 1

    The rest of the world has a commonsense system where those who elect to make a phone call pay all the costs associated with the call. Americans have to do something different & charge the reciever too, WTF?

    Don't mobile phone numbers in the US have prefixes that informer the caller that he/she's dialing a mobile number, so he/she can make a informed decision about whether to dial a mobile number & absorb all hte costs involved?

    If not may I dare ask why the US has some silly system where mobile phone networks don't have indicating prefixes for phone numbers on their networks?