F-Secure posted information about a new Symbian virus on it's weblog yesterday:
SymbOS/Cardtrap.A is otherwise unremarkable Symbian trojan, except that it also tries to infect users PC if user inserts the phone memory card to PC.
When infecting Symbian phone the Cardtrap.A copies two Windows worms (Win32/Padobot.Z and Win32/Rays) to the memory card of the phone. Padobot.Z is copied with autorun.inf file in attempt to start automatically if the card is inserted to PC using windows. Rays is copied with filename SYSTEM.EXE and same icon as the System folder, this is done as social engineering attempt so that user would click on Rays instead of System folder.
To our knowledge, no Windows version supports autorun from a memory card, but it still might work with some Windows version and third party driver combination.
At least the "threat" is not being overblown. Look at this article by Steve Litchfield regarding the real "threat" of mobile virii... Basically, if you don't accept and run unknown software on your phone, you're safe.
[via Slashphone]
