A Proof-of-Concept Virus for iPods Running Linux

An anonymous reader writes "Although antivirus companies will probably create a hype saying that iPods are prone to infections, a virus called 'Podloso' is a newly found virus that is just a proof of concept code that can infect iPods running Linux. Once launched, the virus scans the device's hard disk and infects all executable .elf format files. Any attempt to launch these files will cause the virus to display a message on the screen which says, 'You are infected with Oslo the first iPodLinux Virus.'"

Comments

Hear that?

[despik]

It's the sound of all the real virus authors collectively spinning in their coffins/cells/cubicles.

Re:Hear that?

[Anonymous Coward]

Let's see... To infect your ipod with this virus, you first you have to install Linux. Then you have to install the virus. Then you have to run the virus.

Oo. I'm scared.

Now, if you really want to cause panic and terror among ipod users, come up with something that will either replace the DRM on unprotected tracks after they start selling them or something that recodes all your tunes into WMA format.

I know! I know!

[that this is not und]

Next, I will write a 'virus' that attacks Macintosh SE/30's running NetBSD!

...another "social engineering" virus

[hcmtnbiker]

FTA: Podloso cannot be launched automatically without user involvement.

I always find it amusing when a virus that requires the user to activate it is considered news. By definition it's more social engineering then a vulnerability. If people weren't so stupid I assume nearly 100% of all computer virus' wouldn't exist, or wouldn't be a problem.

Re:...another "social engineering" virus

[Tim C]

The vast majority of viruses require user intervention to run and infect a machine, and aren't considered news (or at least, not individually). I assume that this one is because it's the first for this particular platform.

Re:...another "social engineering" virus

[H3g3m0n]

Technically these are considered worms, as they actively self propagate, they seek out vulnerabilities in other systems and infect them. Viruses on the other hand attach to similar files and require the user to transfer the file and execute it on another system having a passive attack vector. I'm not sure i would count the iPod Linux virus as a virus as it would have to be able to infect other iPods somehow, if it can't infect other iPods then its really just malicious code. Granted you can take the binary files from one iPod and put it on another but thats not likely to happen meaning it has basically no self propagation.

Re:...another "social engineering" virus

[sootman]

But it shouldn't be news. Anything that can run code, can run malicious code. It's only worth mentioning if there's a chance that a user will a) obtain and b) run the code without knowing it's malicious. If the virus were hidden in a song and could be executed just by being played, that would be news.

Oh, and look: it was discovered by a company that makes antivirus software. Wow, what are the odds that an antivirus company would be the first to discover and publicize a virus that runs on what might be called the least-adopted platform ever in history? I'd bet my next paycheck that somewhere there's a connection between an employee of that company and the author of this "virus"--and not just a six-degrees kind of link, I mean a real, substantial link.

Antivirus exec: "Well, in six years, we haven't been able to convince anyone that OS X is insecure. Despite our efforts, there hasn't been a single in-the-wild, self-replicating virus for that platform. What should we try next?"
Underling: "Maybe try spreading FUD about iPods?"
Antivirus exec: "Brilliant!"

Depends on antivirus company

[Ilgaz]

""Although antivirus companies will probably create a hype saying that iPods are prone to infections"

Well, (Eugene) Kaspersky says at viruslist.com blog (http://www.viruslist.com/en/weblog?weblogid=20818 7356):

"Overall, I don't think iViruses will cause serious problems in the future. The iPod world is very different from the PC and smartphone world. Users aren't constantly installing new software and downloading a wide range of files, so that cuts down on the possible infection vectors. And what's there to steal from an iPod? Multimedia files, and that's about all.

So - it was an interesting little puzzle, this proof of concept, but nothing more."

Non-story

[nevali]

This is possibly the biggest waste of a story Slashdot's had in a while.

Not only does it only 'infect' iPods running Linux, but it's not even able to replicate. To call it a virus is stretching the truth, to say the least; it's just a program that trashes your binaries.

Re:Non-story

[Curmudgeonlyoldbloke]

It's an "honour system virus" - in the same way that sending a user a program that deletes all their files and telling them to run it is.

Re:Legality?

[Ilgaz]

I bet RMS will go mad since it isn't called GNU-Podloso

Re:Thank Goodness

[J0nne]

It's for the same reason people install Linux on their iPods in the first place: because they can.

Re:Thank Goodness

[someone1234]

Creating pseudo-life? Hell, 20 years ago i was very happy when my exe header virus first infected one of my files :) It was definitely more satisfying than hacking away on some j2ee shit.

Next gen Virus

[ValiSystem]

Hey, i made a multi platform virus that can infect almost any existing computer. And it's easy to spread : just compile following code : #include "stdio.h" int main (void) { printf("YOU ARE INFECTED BY ULTRAdOOM NExT gen, F3AR THE L0RD !!\n"); exit 0; } Launch and here you are ! (yes, i know, i should have posted that on my blog and write a story for Slashdot)

This is going to spread like wildfire

[DrXym]

Amongst the 8 people running Linux on their iPods.

Parts needed...

[FinchWorld]

iPod - £90 to £250

iPod Linux - Free

Knowledge and desire to install linux on your MP3 Player - Your social life

Having been smart enough to install Linux on your iPod then go out of your way to install a virus - Priceless

For everything else theres run of the mill idiots.

Question

[Rogerborg]

What is the intersection between people who're smart enough to have installed Linux on their iPods, and people stupid enough to run a random executable?

Would anyone in that set like to make themselves known? Anyone? Don't be shy; anyone at all?

Didn't think so.

It's not .elf it's *ELF*

[cculianu]

The file format is called ELF, the executable and linking format. Not .elf. It isn't a file extension. This isn't windows. Bah.

From the J.R.R. Tolkien department ...

[ScrewMaster]

Once launched, the virus scans the device's hard disk and infects all executable .elf format files.

As an Orc myself, I'd have to say that all Elves are considered executable.

Re:Whatever happened to...

[RDW]

How about a Zune virus that strips the DRM from the tracks on the infected machine and 'squirts' itself to all the other Zunes within wireless range? Think about it, if such a virus were released today the number of infections could soar into double figures by the end of the decade!

Re:Whatever happened to...

[Anonymous Coward]

I think this raises the question of which group has larger numbers. Is it iPods with Linux on them or Zunes?

Re:I know! I know!

[Virgil Tibbs]

what about a virus for W32 systems which wipes the OS, saves the user files and proceeds to install ubuntu?

I'd let it infect me over and over again...