subject: Nokia S60 Sms Flaw Depth Analysis Platform - Mobile Phones, Nokia S60-it Industry [print this page] 2009 years, if you still focus only on PC and Network Security, it ignorant. New Year's first day Mobile Industry on a serious security crisis. Nearly half of the global handset market share Nokia Phone has been discovered serious flaws affect all of its S60 platform for its models. The advantage of this vulnerability to attack is only just to give promise to send a note of the S60 mobile phone SMS the number of characters.
Just a few days before, Nokia is also pleased to hear of MTK ridicule the "SMS" incident, turned out that things are unpredictable, and now Nokia is no longer laughing I'm afraid.
Origin - anyone would attack 2008 12 30, German security researcher Tobias? Engel (TobiasEngel) showed us a malicious message, the content is very simple, very serious consequences. Engel said that any Nokia phone can send a malicious message. Once a smart phones being infected, then the phone will not be able to receive more messages. Engel to this attack as "silent curse", the system can run SymbianOS Nokia S60 smartphones to send attack. It is reported that, S602.6 and 3.0 smart phone, after receiving the first message on the lock, while the 2.8 and 3.1 after the lock in the receiver 11. According to the Finnish Internet security firm F-Secure said running UIQ Software Sony Ericsson mobile phones there are the loopholes.
Soon be exposed abroad, a well-known video site smartphone Nokia S60 platform suspended animation vulnerability SMS features demo video. In view video, we CBSi editing simple test carried out immediately, with the unfortunate result, damage is enormous, S60 platform mobile phone text messages received without any prompts, but this time to the destination mobile phone text messaging is already the target this time into a cell phone that have been unable to receive messages, the state can not send text messages.
Symptoms - messaging exception Keywords: surface without exception, can not send and receive text messages
More than two keywords is the typical symptoms of mobile phone bills. After our order, after poisoning, phone the following main forms of expression, in different phone may vary in the specific form:
1. Can open the SMS Inbox, but any other brand mobile phones with mobile phones to send text messages to the target can not reach the target phone can not send text messages.
2. Into the SMS inbox, it says " Memory Enough, please delete some messages "like information, but delete all messages after (or can not operate the Inbox), still can not send and receive new messages.
3. Some models receive 1-11 text articles, ranging from the virus after the phone locked and can not operate.
Promise in mind if your S60 mobile phone platform, the above symptoms occur, please be aware that your cell phone is likely to suffer a misfortune.
Impact model - involving a number of S60 phones
Affected models for the S60 platform, the following list for specific models affected:
Nokia6682 Nokia6681 Nokia6680 Nokia6630 Solutions - passive defense, waiting for the official update
Not yet released an official patch now to change Nokia's new version of the firmware patch, if your phone is still normal, be sure to open the SMS Firewall , Refused to strangers SMS, while in order to avoid attacks from the Address Book contacts, ZDNet strongly recommend that you install the security channel and Nokia launched F-Secure protection program until the new firmware of Nokia so far.
To have threatened mobile phone users can download software patches.
After installing the patch, please restart the phone, and then open the post-killing patch scan, handsets can be back to normal.
Operation if you have any questions about the process and any views on this incident, or in our forum under the message, ZDNet safety channel will work with you to discuss this in the "SMS gate" time.