Lasco
Lasco
Type Network worm
Creator Marco Velasco
Date Discovered 2005.01.10
Place of Origin Rio de Janeiro, Brazil
Source Language
Platform Symbian OS
File Type(s) .sis
Infection Length 15,750 bytes

Lasco is a Symbian OS worm created in Brazil.

Table of Contents

Behavior

Lasco arrives on a system through a bluetooth transmission. The user must then choose to install the software coming through. Lasco then installs the following files:

  • \SYSTEM\APPS\VELASCO\VELASCO.APP
  • \SYSTEM\APPS\VELASCO\VELASCO.RSC
  • \SYSTEM\APPS\VELASCO\MARCOS.MDL
  • C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.APP
  • C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.RSC
  • C:\SYSTEM\SYMBIANSECUREDATA\VELASCO\VELASCO.SIS
  • C:\SYSTEM\RECOGS\MARCOS.MDL
  • C:\SYSTEM\INSTALLS\VELASCO.SIS

Lasco searches for all files with a .sis extension and places a copy of itself in them. It will run

Lasco will then search for other bluetooth devices and send a copy of itself to them, regardless of their OS.

Origin

Lasco was coded by Marcos Velasco, a programmer from Rio de Janeiro, Brazil. Velasco is also responsible for at least one variant of the Caribe worm. He published the source code because researchers at Kaspersky did not believe the worm was his.

Sources

Eric Chien. Symantec Security Response, SymbOS.Lasco.A. 2007.02.13

Symbian Central (through Symbian Freak), Marcos Velasco, Symbian Virus Writer. 2005.03.03

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 3.0 License