From F-Secure blog, they’ve found a new mobile phone virus who has the ability to infect PC too. SymbOS/Cardtrap.A is a Symbian trojan virus, but it also tries to infect users PC if user inserts the phone memory card to PC.

According to F-Secure, during infection, Cardtrap.A will create two Windows worms (Win32/Padobot.Z and Win32/Rays) in the memory card of the phone. Padobot.Z is copied with autorun.inf file in attempt to start automatically if the card is inserted to PC using windows. Eventhough most of current Windows version not yet support autorun from memory card, but some Windows version or third-party driver might.

The second worm, Rays, is copied with filename SYSTEM.EXE and same icon as the System folder. This is done as social engineering attempt so that user would click on Rays instead of System folder.

The goal of the trojan is most likely to cause user to infect his PC when he is trying disinfect his phone. A typical reaction of more advanced user who would encounter trojan like Cardtrap, would be to insert the phone memory card to PC to copy file manager or disinfection tool to the card. Only this time a careless user might to get his PC infected in process.

F-Secure has added detection and disinfection for this mobile phone virus into F-Secure Mobile Anti Virus software.

[ Via Slashphone ]