It's in the enterpriseitplanet.com - http://www.enterpriseitplanet.com/se...le.php/3495311
Mabir Claws into Symbian OS
April 5, 2005

A new worm named Mabir.A appears to try even harder to infect Symbian OS-based devices than its cousin, Cabir.
-First CABIR, now MABIR. Relatively obvious.

Advisory here from F-Secure - http://www.f-secure.com/v-descs/mabir.shtml

Exact detection for Mabir.A was published on April 4th, 2005 in database build number 34.

The SIS files that files that Mabir.A sends have always the same file name "caribe.sis". Please note that while Mabir.A uses the name SIS file name as original Cabir worms, it is different worm than Cabir.
- See, they are really relatives but with different attitude.

In addition of spreading over bluetooth the Mabir.A will also listen for any MMS or SMS messages that arrive to the infected phone. And respond to those messages with MMS message that contains Mabir as "info.sis".
- MMS or SMS? Got to research more on this.


Yo!