Microsoft Windows CE Trojan |
|
US-CERT is aware of reports of a trojan that affects Microsoft Windows CE. This trojan disables Windows Mobile application installation security.
The trojan may take any or all of the following actions on the mobile device:
- spreads via seemingly legitimate application installation files
- installs as an autorun program on the memory card
- installs itself to the device when an infected memory card is inserted
- protects itself from deletion by copying itself back to disk
- replaces the browser's homepage
- allows unsigned applications to install without warning
US-CERT encourages users to take the following preventative measures to help mitigate the security risks:
- Install anti-virus software on the mobile device, and keep its virus signature files up-to-date.
- Use caution when downloading and installing applications.
US-CERT will continue to provide more information as it becomes available.
|