The WinCE/InfoJack Trojan hijacks the infected device"s serial number, operating system and other information and uploads it to an attacker-controlled Web site. The U.S. Computer Emergency Readiness Team has raised an alert for an in-the-wild malware attack against Microsoft Windows CE powered mobile devices. According to the US-CERT warning, the Trojan horse program is capable of disabling Windows Mobile application installation security.
The Trojan, dubbed WinCE/InfoJack by anti-virus vendor McAfee, has been programmed to hijack the infected device"s serial number, operating system and other information and upload it to a Web site controlled by the attacker. "It also leaves the infected mobile device vulnerable by allowing silent installation of malware. The Trojan modifies the infected device"s security setting to allow unsigned applications to be installed without a warning," McAfee said in a post on its Avert Labs blog.