January 2005

ID: 00022
Ref: 20/05
Date: 12 January 2005:11:02:07
Version: 1

---

Title: Malicious Software Report - Lasco.A
Abstract: Lasco.A is a Bluetooth using worm and SIS file infecting virus that runs in Symbian mobile phones that support Series 60 platform.

---

Lasco.A is a Bluetooth using worm and SIS file infecting virus that runs in
Symbian mobile phones that support Series 60 platform.

Lasco.A replicates over Bluetooth connections and arrives to phone messaging
inbox as velasco.sis file that contains the worm. When user clicks the
velasco.sis and chooses to install the velasco.sis file the worm activates
and starts looking for new devices to infect over Bluetooth.

UNIRAS has not received any incident reports and it is believed that so far
Lasco.A is currently only a 'proof of concept' virus. However, to protect their
handsets, users should set them to hidden Bluetooth mode, and not discoverable mode.

URL:
http://www.f-secure.com/v-descs/lasco_a.shtml
http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?IdVirus=57326&sind=0
http://story.news.yahoo.com/news?tmpl=story2&u=/pcworld/20050111/tc_pcworld/119243