Brador identifies the IP address of the infected handheld and sends it to the virus coder to inform him that the handheld is connected to the Internet and that the backdoor is active. Brador then opens port 2989 and awaits further orders.And to think we all thought our personal data was safer on a PDA. For the time being I believe it is but who knows what the future holds?
The backdoor responds to the following commands:
d - lists the directory contents
f - closes the session
g - uploads a file
m - displays MessageBox
p - downloads a file
r - executes the specified command
Thursday, August 5, 2004
PocketPC Trojan Horse
Well it has finally happened, a trojan horse has been detected in PDAs running Microsoft's PocketPC operating system. An article has surfaced on The Register: Trojan horse stalks PocketPC | The Register. Only a small amount of PocketPC's have been infected. This comes just shy of a month after the First Pocket PC Virus Surfaces surfaced which was a "proof of concept" and not released into the wild. A quote from viruslist.com which lists the virus as Backdoor.WinCE.Brador.a:
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment