Threat Category: Mobile threats | Page 21

Occasionally something comes along that stands out a bit: right now, it’s Trojan-SMS.WinCE.Sejweek.a, a new program designed to send SMS messages from an infected device.

Today we added detection for a new variant of the program – not-a-virus.Porn-Dialer.SymbOS.Pornidal.c. Just like its predecessor, this application can be harmful for two reasons.

The evolution of mobile malware all but stopped after the publication of our first two articles on the subject. This is why there has been an interval of nearly three years between articles

Today we detected a new potentially unwanted program for smartphones running Symbian S60 2nd edition – not-a-virus:Porn-Dialer.SymbOS.Pornidal.a

We’ve just detected a new malicious program with a similar payload: Trojan-SMS.J2ME.GameSat.a.

We found 5 new Trojans over the past week which send such money transfer requests to 151 – without the permission or knowledge of the phone’s owner.

We picked up this Trojan a while ago, but the latest variant of Trojan-SMS.J2ME.Konov is now spreading via social networking sites, specifically “Vkontakte” (the Russian version of Facebook).

One of the most notable malicious programs during the first half of 2008 was, undoubtedly, the Storm worm (classified by Kaspersky Lab as Zhelatin). It remains in the vanguard of Malware 2.0.

We came across some interesting mobile phone software yesterday. It’s designed for the J2ME platform for mobiles and it’s a midlet with a Kaspersky Anti-Virus icon

Our annual report on malware evolution in 2007, published a few months ago, contained forecasts on how the threat landscape would evolve in 2008

This annual report provides an overview the evolution of malware, adware and potentially malicious programs in 2007, and compares this data to that of 2006.

This quarterly report may be the most unusual of all of our previous quarterly reports. The events that took place during the first six months of 2007 have shown us that the direction in which threats are evolving is from social engineering to the increased usage of a variety of vulnerabilities to penetrate the system

This week’s been an interesting one in the world of mobile malware. We detected three variants of a new Trojan for mobile phones, Trojan-SMS.SymbOS.Viver

The one that didn’t get away

Strangers on a train

Reports

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Kaspersky researchers uncovered malicious wheel packages in PyPI that targeted both Windows and Linux and contained a dropper delivering malware dubbed ZiChatBot. We attribute this activity to OceanLotus APT.

Mobile threats

Trojan-SMS.WinCE.Sejweek

Porn dialers for smartphones, part 2

Mobile Malware Evolution: An Overview, Part 3

Porn dialers for smartphones

Indonesian Trojans redux

Mobile thefts – using malware in Indonesia

Move on, move on…

Kaspersky Security Bulletin 2008: Malware Evolution January – June 2008

Antivirus Fraudware Goes Mobile?

Malware evolution: January – March 2008

Kaspersky Security Bulletin 2007: Malware evolution in 2007

Malware Evolution: April – June 2007

Viver unveiled

The one that didn’t get away

Strangers on a train

Reports

ToddyCat: your hidden email assistant. Part 2

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Kimsuky targets organizations with PebbleDash-based tools

OceanLotus suspected of using PyPI to deliver ZiChatBot malware