Remember we posted information about the first network worm, Cabir which infects telephones running Symbian OS? The source code used to create the original Cabir worm has been posted on the Internet by a member of an international virus-writing group.

According to F-Secure, they've found two new Cabir variants (Cabir.H and Cabir.I, respectively). There are two important differences.

First of all, these new variants seem to be recompiled versions based on original Cabir source code. Which means that the Cabir source code is floating around in the underground. F-secure has never see the source code.

Second important difference is that these new Cabir variants fix a flaw that was slowing down original Cabir's spreading speed. Cabir originally would only spread to one new phone per reboot. Which explains why it so far has only managed to spread to eight countries (as far as they know), despite being in the wild for months already.

Symbian Series 60 worm/trojan history so far in 2004:  

• June 15th: Cabir.A is found
• June 16th: Cabir.B is found
• November 19th: Skulls.A trojan is found
• November 29th: Skulls.B is found
• December 9th: Cabir.C is found
• December 9th: Cabir.D is found
• December 9th: Cabir.E is found
• December 21st: Skulls.C is found
• December 21st: Cabir.F is found
• December 21st: Cabir.G is found
• December 26th: Cabir.H is found
• December 26th: Cabir.I is found