WINCE_INFOJACK.A

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview

This worm is designed to run in the Windows CE environment used in mobile devices. It drops file(s)/component(s).

It creates registry key(s)/entry(ies).

It connects Web sites to send and receive information.

When an affected mobile device is connected to the Internet, this worm steals system information and sends the gathered them to a home server.

It accesses Web site(s) to download files.

It also downloads an updated copy of itself from a certain Web site. However, as of this writing, the said URL is inaccessible.

This worm randomly alters the security settings on the affected mobile. This causes all software installations to complete without giving any safety precaution. It may also send SMS from the compromised device to randomly selected contacts.

It drops copies of itself on memory cards inserted in an affected device.

Related Items