InfoJack trojan Infects mobile devices running Windows CE

By Janine de Blois

InfoJack disables Windows Mobile application installation security. It sends the infected device’s serial number, operating system, and other information to the author of the Trojan.

Infected devices are then subject to further malware as it automatically downloads and installs unsigned applications without user knowledge. It also changes the homepage.

It has widely been distributed with legitimate applications such as, Google Maps, applications for stock trading, and a collection of games.

It attaches itself to many of the cab files in these programs. It installs itself as an auto run program on the memory card then reinstalls itself to the phone/device when the memory card is inserted.

Fortunately, law enforcement has taken down the original website. US-CERT has issued a security warning and tells users to help protect themselves:

Install anti-virus on your mobile device and keep it updated. Use caution when downloading and installing applications.