The program, a Trojan horse known as Troj/Delf-HA, takes control of any computer whose user runs the malicious software, antivirus company Sophos said. It then uses Russian text-messaging services to send a Short Message Service (SMS) file to cell phone users at random.
"Mobile-phone spam is a huge nuisance and can run up an expensive phone bill for owners," Gregg Mastoras, senior security analyst at Sophos, said in a statement posted Monday. "SMS spammers are now using unprotected, innocent PCs to pass on their unwanted messages."
The Delf Trojan horse does not aim to enter and infect the cell phone itself, unlike previous nuisances,. Instead, it compromises PCs and sends out messages from there.
Four years ago, a virusused PCs to send a deluge of SMS messages to cell phone users in Spain. Previous SMS spam campaigns have attempted to get cell phone users to call a pay-per-minute number or sign up for costly hotline services, Mastoras stated.
Some experts believe that mobile-phone spam could quicklyas Internet spam.
In August, the Federal Communications Commission voted tounless the recipients had agreed to receive the messages. However, the commission did not extend the ruling to unsolicited text messages sent through mechanisms like SMS, which could make the decision ineffectual.
The Delf Trojan horse downloads the spam message that it intends to send from a Russian Web site. Unlike a virus, the program does not automatically try to spread to other computers. It relies on the attacker to send out the malicious software to potential victim PCs.
People can help guard their systems against Trojan horses by only clicking on e-mail attachments that they trust.