NEWS FROM THE LAB - Thursday, November 18, 2004

Repacked version of Cabir.B found Posted by Jarno @ 08:17 GMT

A repacked version of Cabir.B Symbian worm has been found on Chinese web portal. The repacked sample contains binaries that are fully indetical to original Cabir.B so it's not a new variant. However the new SIS installation file contains different settings as the one created by Cabir.B, which cause it to install the worm into different directory and display pop-up text during installation.

This repacked version is detected by F-Secure Mobile Anti-Virus for Series 60 without any need for database updates.

Thanks for Alex Lucic for notifying us about the repacked version.