Mar 3, 2009

Our lab found the first signed S60 3rd edition Trojan on Wednesday 18 ^th February. There are spy tools and other privacy threats directed at S60 3rd Edition phones, but malware is still mainly an issue on the S60 2nd Edition phones. What makes it special is that all the evidence suggests it uses a valid Symbian Certificate. With this certificate, the Trojan is signed and being a signed application means that it gains privileged access. Basically, it collects data about the phone, opens an HTTP connection in order to upload data, keeps the connection open at all times, and attempts to send SMS messages to the phone’s contact list.

You’re protected, because F-Secure Mobile Security detects and removes this Trojan.