Lasco | |
---|---|
Type | Network worm |
Creator | Marco Velasco |
Date Discovered | 2005.01.10 |
Place of Origin | Rio de Janeiro, Brazil |
Source Language | |
Platform | Symbian OS |
File Type(s) | .sis |
Infection Length | 15,750 bytes |
Lasco is a Symbian OS worm created in Brazil.
Behavior
Lasco arrives on a system through a bluetooth transmission. The user must then choose to install the software coming through. Lasco then installs the following files:
- \SYSTEM\APPS\VELASCO\VELASCO.APP
- \SYSTEM\APPS\VELASCO\VELASCO.RSC
- \SYSTEM\APPS\VELASCO\MARCOS.MDL
- C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP
- C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC
- C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS
- C:\SYSTEM\RECOGS\MARCOS.MDL
- C:\SYSTEM\INSTALLS\VELASCO.SIS
Lasco searches for all files with a .sis extension and places a copy of itself in them. It will run
Lasco will then search for other bluetooth devices and send a copy of itself to them, regardless of their OS.
Origin
Lasco was coded by Marcos Velasco, a programmer from Rio de Janeiro, Brazil. Velasco is also responsible for at least one variant of the Caribe worm. He published the source code because researchers at Kaspersky did not believe the worm was his.
Sources
Eric Chien. Symantec Security Response, SymbOS.Lasco.A. 2007.02.13
Symbian Central (through Symbian Freak), Marcos Velasco, Symbian Virus Writer. 2005.03.03