Fortinet

The Symbian malware Yxes is (nearly) keeping me awake these days. Among other functionalities, it sends HTTP requests to a remote web server. The URLs it gets are the following: – Yxes.A: http://[REMOVED]/Kernel?Version=<VERSION> – Yxes.B or Yxes.E: http://[REMOVED]/Kernel.jsp?Version=<VERSION>&PhoneType=<TYPE> – Yxes.C: no similar URL – Yxes.D: this one issues two different requests: http://[REMOVED]/bs?Version=<VERSION>&PhoneImei=<IMEI>&PhoneImsi=<IMSI>&PhoneType=<TYPE> http://[REMOVED]/number/?PhoneType=<TYPE> http://[REMOVED]/index.jsp?PhoneType=<TYPE> – [...]