Nokia paid millions to protect Symbian from code thieves

Summary:A Finnish television station has discovered that one time mobile phone giant Nokia paid millions in Euros to keep essential software for its Symbian operating system from being used to create malware.

Nokia reportedly paid millions of euros (Finnish) to blackmailers in 2007-2008 to keep a key part of the source code for its Symbian feature phone platform from being used to create malware, according to Finnish broadcaster station MTV.

symbian-logo

According to the report, which has been confirmed by Finnish police, the code blackmailers had stolen the Symbian's encryption key. With these few kilobytes of code, the code thieves could have created signed applications that would have appeared to have been, not merely legitimate Symbian applications, but Nokia programs and operating system "upgrades."

In short, this would have given the cybercriminials the power to create malware and root-kits at will.

At the time, Nokia had just over 50 percent of the world phone market and the vast majority of these phones were running Symbian. Apple's iPhone had just been released in June 2007 and Android was only a beta. Android 1.0 would not be released until September 2008. Although Nokia would  start abandoning Symbian only three years later  for Windows Phone, Symbian was at that time the most important mobile operating system in the world.

With that in mind, Nokia's leadership agreed to paid millions in return for the promise that the software thieves would not use the encryption key to produce malware. Nokia enlisted the help of the police and delivered the ransom in a bag of cash to a parking lot near an amusement part in Tampere, Finland.

The money was picked up but the police lost track of the culprits.

While the Finnish police are still working on the case, the culprits have never been located. They also, it appears, never used the code against Symbian. Of course, today, according to comScore, Symbian has only a 0.2 percent market share.

The once mighty Symbian may have fallen, but at least it didn't collapse because of a major security breech.

Related stories:

Topics: Mobility, Mobile OS, Nokia, Security

About

Steven J. Vaughan-Nichols, aka sjvn, has been writing about technology and the business of technology since CP/M-80 was the cutting edge, PC operating system; 300bps was a fast Internet connection; WordStar was the state of the art word processor; and we liked it.His work has been published in everything from highly technical publications... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.