Cabir source code slips out - mutants to be expected

[Alexander Turcic]

The source-code of Cabir, a Symbian OS and Series 60 UI-targeting worm, appears to have slipped out and been brought to a wider audience. According to F-Secure,

"First of all, these new variants [of the Cabir worm] seem to be recompiled versions based on original Cabir source code. Which means that the Cabir source code is floating around in the underground. Which is bad news. We didn't know the sources were out there, and we've never seen them."

The worm was original written by the virus-writing group 29A Labs and Security firms believe that the group planned to release the source code in their next virus tech magazine.

Some phones that are known to be vulnerable: Nokia N-Gage/N-Gage, Nokia 3230/3650/3600/6260/6600/6620/6670/7610/7650, Panasonic X700, Samsung SGH D700/D710, Sendo X, Siemens SX1.

So better be careful next time when you upload software to your cell phone. Also, don't leave your phone's Bluetooth set to discoverable, and confirm any file you receive over Bluetooth (Cabir replicates via Bluetooth)!