NEWS FROM THE LAB - Thursday, July 9, 2009

"Sexy Space" Symbian Worm Posted by Response @ 13:11 GMT

Dancho Danchev of ZDNet's Zero Day blog has an interesting post regarding Transmitter.C — which is supposedly a significant modification of the Sexy View SMS worm that we posted about in February.

We've analyzed this new variant, which we call Worm:SymbOS/Yxe.D, and from our point of view there are no major differences from our original detection.

Except for one thing…

This Yxe.D variant is signed with a certificate from yet another company.

yxe.d certificate info

So now there are two Symbian approved worm vendors for S60 3rd Edition phones.

See our Worm:SymbOS/Yxe description for additional details.