New virus attacks Java

A new virus has emerged in the mobile world — the first virus that attacks Java-supported phones. The virus, called Redbrowser A, was discovered early last week and has been confined only to Russian networks, but mobile security experts say the new virus is particularly worrisome because it not only targets mass-market Java phones but is also the first “professional” virus that seeks to steal money from owners of the infected devices.

Almost all mobile viruses so far have been limited to smartphone platforms like Symbian and have been proof-of-concept by design, meaning they have been developed more to test the limits and weaknesses of the wireless network rather than as a means of financial gain, said David Frazer, director of technology services at F-Secure, a security software firm.

Redbrowser A tries to manipulate the phone's user into authorizing numerous premium short message service transactions costing $5 per message. Although the virus attacks all Java phones, it can only execute itself on those using the standard Mobile Information Device Profile 1.0 application-programming interface (API) supported by a specific wireless messaging API. According to Sun Microsystems, that accounts for more than 125 handsets and the majority of the mid-tier Java-enabled phones currently on the market.

So far, the virus hasn't spread beyond Russian networks, and it's only limited to specific types of J2ME phones. “The greatest fear is the context of what's happened,” Frazer said. “It shows people are starting to use these viruses for professional profit.”