The program, known alternately as Backdoor.Bardor.A and WinCE.Brador.a, lets an attacker gain full control of the handheld and is the first such "backdoor Trojan" program to emerge for Pocket PCs. However, such backdoor programs are not capable of propagating on their own and instead must be sent as e-mail attachments or through similar means, making them less dangerous.

Symantec rated the bug a "1," the lowest on its five-point scale. In a statement, the company offered the standard warning not to open or execute files from unknown sources.

"Backdoor server and Trojan horse programs often use enticing file names to trick users into executing them," said Oliver Friedrichs, senior manager at Symantec Security Response. The bug appears to be limited to devices that use an ARM processor and Microsoft's Pocket PC operating systems, Symantec said.

By Ina Fried at CNET.

[ Read more ]

Related items

• Review: Malware: Fighting Malicious Code (26 July 2004)
• Review: Viruses Revealed (28 April 2003)