The Web    Google
5/3: SymbOS/Locknut-C Infects Handsets

5/3: SymbOS/Locknut-C Infects Handsets
May 3, 2005

SymbOS/Locknut.C is malware that appears to only affect Series 60v2 platforms (tested Series 60v1 platforms did not exhibit any symptoms). Locknut.C is part of the payload of the Trojan SymbOS/Yo.A

Yo.A, in turn, was discovered in a submission by a Mobile World Forums user. The payload of this malware is to prevent the use of the infected handset by causing an infinite loop of thread crashes. For the end-user, this manifests as a dialogue box reporting "App.closed AppArcServerThread" that endlessly respawns.

This will render the handset inoperative, and will persist through reboots of the device (assuming that the malware has installed correctly--some variants do not, so the handset may recover after a reboot).

More information can be found at McAfee page.

  • 1/27: StartPage-FX Trojan Modifies IE Settings
  • Virus Alert Activity Intensifies
  • 2/3: Rbot-VD a Worm and a Trojan
  • 1/3: Hilin Worm Written in Visual Basic
  • MARID Floats Sender ID Compromise
  • Disaster Recovery Still Just an IT Responsibility
  • 4/18: Mytob-BR Worm Mails Itself Out
  • 3/3: VBS.Allem Worm a Mass-Mailing Worm
  • Vericept Adds Fraud, Identity Theft Protection
  • Bagle Attack Picking up Speed
  • 3/16: Trojan.Eaghouse Steals Info
  • Security Camera News