1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content




Worm:SymbOS/Beselo

Name : Worm:SymbOS/Beselo
Category:Malware
Type:Bluetooth-Worm
Platform:SymbOS
Date of Discovery:December 21, 2007

Summary

Beselo is a MMS and Bluetooth worm family that operates on Symbian S60 Second Edition devices.

The Beselo family is very similar to the Commwarrior family but contains enough differences in the code base and behavior that it is counted as separate family.

Disinfection

Disinfecting using F-Secure Mobile Anti-Virus

  • Download F-Secure Mobile Anti-Virus from http://f-secure.mobi
and activate the Anti-Virus
  • Scan the phone and remove any components of the malware
  • Reboot the phone to remove memory resident components

Additional Details

Beselo worms spread via Bluetooth and MMS as Symbian SIS installation files.

The installation file is not labeled with the .SIS extension. The SIS file is named with MP3, JPG, or RM extensions in order to trick the recipient into thinking that it is multimedia file.

If the phone user attempts to open the file, Symbian will recognize it as an installation file and will start the application installer.

Please see the following variant descriptions for additional details:


Additional Notes:

Variants Beselo.C,  Beselo.D and Beselo.E are closely related to Beselo.B.