main
Report a problem

US-CERT Warns of Microsoft Windows CE Trojan

Daniel Fleshbourne   on 27 February 2008 - 12:31 · 5 comments & 5586 views

Advertisement (Why?)
The WinCE/InfoJack Trojan hijacks the infected device's serial number, operating system and other information and uploads it to an attacker-controlled Web site. The U.S. Computer Emergency Readiness Team has raised an alert for an in-the-wild malware attack against Microsoft Windows CE powered mobile devices. According to the US-CERT warning, the Trojan horse program is capable of disabling Windows Mobile application installation security.

The Trojan, dubbed WinCE/InfoJack by anti-virus vendor McAfee, has been programmed to hijack the infected device's serial number, operating system and other information and upload it to a Web site controlled by the attacker. "It also leaves the infected mobile device vulnerable by allowing silent installation of malware. The Trojan modifies the infected device's security setting to allow unsigned applications to be installed without a warning," McAfee said in a post on its Avert Labs blog.

View: The full story @ eWeek

Post a comment · Send to friend Comments · There are 5 additional comments
(2 replies) #1 Magallanes on 27 Feb 2008 - 15:19
i wonder how pda and smartphone users are so f*ck** up cause their manufactured didn't (and will not) launch any firmware update.


#1.1 ahhell on 27 Feb 2008 - 16:50
Uh..what? English please.
#1.2 z_rudy on 27 Feb 2008 - 17:26
(ahhell said @ #2.1)
Uh..what? English please.


He probably means that Windows Mobile users will be screwed because they won't get a "security update" for their devices since manufacturers do not release updates.

Of course, I disagree with what he said because it is flawed and totally incorrect.
(1 reply) #2 rage710 on 27 Feb 2008 - 19:33
The Trojan was packed inside a number of legitimate installation files and distributed widely. It has been distributed with Google Maps, applications for stock trading, and a collection of games, McAfee said.


Thats just wonderful...just lovely..

So....do I now need virus protection for my phone?
#2.1 mrp04 on 27 Feb 2008 - 23:33
(rage710 said @ #2)
The Trojan was packed inside a number of legitimate installation files and distributed widely. It has been distributed with Google Maps, applications for stock trading, and a collection of games, McAfee said.


Thats just wonderful...just lovely..

So....do I now need virus protection for my phone?

not really since this can't be installed out of thin air. you need to run something.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)