Vodafone distributes Mariposa botnet

[Rmus]

http://research.pandasecurity.com/vo...utes-mariposa/

Today one of our colleagues received a brand new Vodafone HTC Magic with Google's Android OS.
The interesting thing is that when she plugged the phone to her PC via USB her Panda Cloud Antivirus went off, detecting both an autorun.inf and autorun.exe as malicious. A quick look into the phone quickly revealed it was infected and spreading the infection to any and all PCs that the phone would be plugged into.

Be sure and read all of the comments.

As with the infected digital photo frames from several years ago, it's not always easy to determine at what point in the manufacturing/distribution chain the infection occurred.

It became clear at that time that since more USB devices are being marketed, that protection against USB exploits must be a part of one's security set up.

In addition, reported here:

Vodafone Android Phone: Complete with Mariposa Malware
http://isc.sans.org/diary.html?storyid=8389

Also read the comments.

----
rich

[funkydude]

Turn autorun off! Thankfully Windows 7 doesn't autorun USB devices.

[CloneRanger]

They just keep on coming, look at the other devices also infected on here http://www.broadbandreports.com/foru...h-malware-incl

Bet it's not the last we see of these types of methods.

[Daveski17]

I found this as well from eSecurity Planet. I must admit I was a bit gobsmacked to find Mariposa & Conficker were involved!


Link to Conficker Eye chart for anyone interested in checking to see if they have Conficker.

[CloneRanger]

Looks like i'm infected



According to that test anyway, what can it mean ?

[Daveski17]

Originally Posted by CloneRanger

Looks like i'm infected

Attachment 216105

According to that test anyway, what can it mean ?

Oh dear!

(It's a good job I'm on Orange & not Vodafone that's all I can say)

[siljaline]

Recent mariposa events, a worthwhile read.