The Skulls Trojan horse is back with another variant, this time one that poses as antivirus software to try and trick victims. The Trojan, which affects Symbian-based cell phones, is currently in its L variant, and is disguised as a pirated copy of F-Secure Mobile Anti-Virus. Skulls.L, like older version of the malware, attempts to disable system applications and replace their icons with images of skulls, and also drops versions of the Cabir worm on the device.
People whose handsets are infected with Skulls.L can download a tool from F-Secure's Web site to remove it. However, the company said it has received only a single sample of the Trojan, suggesting that--like other variants of Skulls--it is not widespread. F-Secure said its current mobile antivirus product detects the variant.