Home Business IT Security Hold the phone, it's a virus!

As a mobile phone telco, it's bad enough to supply a phone with malware on the internal storage device.  Doubly so when the recipient works for a major anti-malware vendor.

According to Pedro Bustamante, Senior Research Advisor at Panda Security a fellow employee at the company went out at lunchtime and bought a (seemingly) new HTC Magic smartphone from Vodafone.  Upon returning to the office, they gleefully unboxed it and, in order to manage  connected the phone to their PC.

All the AV alarms went off!

It seems that the memory card in the phone was infected with not one, but three pieces of malware.

The AV software uncovered a variant of the recently shut-down Mariposa botnet (this one being managed by a different bot-herder) which was launched via an autorun.inf file.

Confiker and a password-stealing package were also located on the memory card.

As yet, it has not been determined whether this was a refurbished unit (suggesting a probable one-off incident) or whether there is a batch of these memory cards in circulation.

Either way, it casts Vodafone Europe's quality assurance procedures in a rather poor light.

Around close-of-business time yesterday in Europe yesterday, Panda indicated they planned to obtain a random sample of similar phones to test whether the issue is widespread.

This is not the first time such events have occurred.  ZDNet has compiled and extensive list of such events; including a recent situation where Telstra distributed memory sticks at AusCERT in 2008.

HOW TO OFFER 4G TO YOUR CUSTOMERS

Download an information pack to learn more about how you can offer competitive 4G plans to your customers.

> everything you need to operate your own 4G telco

> support for you and your customers

> billing, back-end and full compliance.

DOWNLOAD NOW!

HOW TOP MANAGERS MOTIVATE, ENERGISE EMPLOYEES

Download an in-depth guide to managing a healthy, motivated and energetic workforce without breaking the bank.

DOWNLOAD NOW!

David Heath

joomla statistics

David Heath has over 25 years experience in the IT industry, specializing particularly in customer support, security and computer networking. Heath has worked previously as head of IT for The Television Shopping Network, as the network and desktop manager for Armstrong Jones (a major funds management organization) and has consulted into various Australian federal government agencies (including the Department of Immigration and the Australian Bureau of Criminal Intelligence). He has also served on various state, national and international committees for Novell Users International; he was also the organising chairman for the 1994 Novell Users' Conference in Brisbane. Heath is currently employed as an Instructional Designer, building technical training courses for industrial process control systems.

 

 

 

 

Connect

Join the iTWire Community and be part of the latest news, invites to exclusive events, whitepapers and educational materials and oppertunities.
Why do I want to receive this daily update?
  • The latest features from iTWire
  • Free whitepaper downloads
  • Industry opportunities