Friday, July 11, 2008

Series 60 Third Edition Malware Isexplayer. The true Story.


Okay.. I am the guy who reported this story initially.. and now I see that it has created a storm within the Symbian circles...


The issue was first reported on Esato by me and then on Techtree.. and subsequently on Symbian Freak and then on All About Symbian

This is what the initial reports looked like..

"Just as you thought the new Series 60 third edition handsets were a safer bet than the older ones, here’s something to be worried about. Probably the first malware/virus for Series 60 third edition is making rounds on the Internet. It is well known that earlier series 60 editions were plagued by malware issues ranging from the Commwarrior variants, Skull to Caribe. The newest kid on the block, a software called “Isexplayer” acts as a pornographic portal offering various “services”. Once you install the .sis file, it is reported that the software dials a premium rate international phone number – automatically and that too randomly without the owners’ knowledge. Interesting to note is that the software does ask for your permission to allow it to make calls – but this is at the time of installation. End users usually allow this. What the program does not state is that the calls will be automatically made!"



That was my initial story. I have checked the application and saw the license agreement which has an interesting clause.

Here it is
"B)Access fee:Users get unlimited access to the 3g6.se and is billed subsequently per entry. The access is billed by calls made to an international destination. The application will try to call destinations which is the most inexpensive for the subscriber (based on the subscribers country of residence), but are not in any matter obligated to do so. You agree to let the application make these calls to pay for access fee when due according to these billing terms. Total call duration for unlimited access may vary from 10 minutes to four hundred minutes per entry, depending on the subscribers country of origin and available international destination


I reiterate that this is not a Virus but a program which has a malware tendency... No reason to be worried.. But if you install this inadvertently, it might hit you real bad.. So please do take care. Additionally, it sounds like the software works differently in different phones. On mine, it made 13 international calls. On some others it may do something else. I am not sure because I have tested it only on my phone.


Also, there seems to be a confusion regarding the type of file this is.. I downloaded this to check what the file type is and see that it is a sis file.. some others say it is a .jar file. I doubt if the site detects the phone browser and offers the appropriate version for the kind of phone you are using.. More on this when I get further information...

1 comment:

Anonymous said...

Hi,
posted:
http://tamss60.tamoggemon.com/2008/07/14/news-from-isxplayer/

All the best
Tam Hanna