A security vendor, F-Secure, has detected a new variant of an aggressive Russian mobile worm that uses some alarming new tricks. Commwarrior.Q is a new variant of the Commwarrior worm that is based on Commwarrior.C, but unlike most Commwarrior variants, Commwarrior.Q is a recompiled version that contains new functionality.
Like Commwarrior.C, Commwarrior.Q also spreads over Bluetooth, MMS messages, and to any memory card that is inserted into the infected phone. But, Unlike Commwarrior.C, Commwarrior.Q will also search for any SIS files in the phone or memory card and will infect those SIS files with itself. When it’s active, Commwarrior.Q will randomly display a HTML page with the phone’s web browser.
Commwarrior.Q affects only Symbian S60 phones that use Symbian OS version 8.1 or older – phones using Symbian OS 9.0 (S60 3rd Edition) will not be affected.
More information on the F-Secure’s site.