Advertisement
The virus sits on a regular Windows system waiting for a mobile device to dock. Once a mobile device is detected the virus copies itself to that device and then erases all files in the "My Documents" directory.
According to information sent to MARA, along with the proof of concept virus were notes that said the virus was written in C# and that the virus would probably run on any Windows CE and Windows Mobile device that uses .NET Compact Framework 1.1. MARA dubbed the virus "Crossover."
A spokesperson for MARA said they would make "detailed analysis \[as well as the\] malware binary available to antivirus companies and security experts who qualify for MARA membership ."
