This trojan called Doomboot.G specializes in pretending to be an antivirus application called ExoVirusStop by exoSyphen Studios.
Jarno Niemela, a virus researcher with security firm F-Secure, said that this is the first trojan to attack mobile phones that can act like anti-virus software. This trojan is the latest version of the Doomboot trojan family that attacks the Symbian mobile operating system.
Niemela said: 'We have caught a number of fake trojans in the form of antivirus applications, but Doomboot.G is the first trojan capable of acting like a mobile antivirus tool. dynamic '.
Niemela said that the installation of this Doomboot.G is the same as the installation of the ExoVirusStop antivirus application, which also creates a folder in which a batch of files is included in a unified application. In these files there is a file containing the Lasco.A virus.
When the user activates a fake application that has just been installed, the Trojan Doomboot.G will also perform a spectacular Lasco.A virus screen to win the trust of the phone owner. After the Lasco.A is finished, it will require the owner to restart his mobile phone. Any data and file system in the computer will be almost completely lost if the user naively restarts the mobile phone and the infected phone will be completely unable to restart again.
F-Secure said that mobile phones with the original version of the ExoVirusStop antivirus tool will never be infected by Doomboot.G because it cannot successfully install those with ExoVirusStop. .
Security experts say that by the end of 2008, there will be official mobile viruses that are capable of killing all mobile phones at the time.