Slashdot Mirror
First Malicious iPhone Worm In the Wild
An anonymous reader writes "After the ikee worm that displayed a picture of Rick Astley on jailbroken iPhones, the first malicious iPhone worm (Google translation; original, in Dutch) has now been discovered in the wild. Internet provider XS4ALL in the Netherlands encountered several of such devices (link in Dutch) on the wireless networks of their customers and put out a warning. After obtaining a copy of the malware it was discovered that the jailbroken phones, which are exploited through openSSH with a default password, scan IP ranges of mobile internet providers for other vulnerable iPhones, phone home to a C&C botnet server, are able to update themselves with additional malware and have the ability to dump the SMS database as well. Owners of a jailbroken iPhone with a default root password are advised to flash to the latest Apple firmware in order to ensure no malware is present."
how about changing the default password............
Owners of a jailbroken iPhone with a default root password are advised to flash to the latest Apple firmware in order to ensure no malware is present.
That seems a bit excessive when a simple one-time usage of the included "passwd" utility will suffice. Srsly though, jailbreaking utilities should be pestering users to change their password from the default because this is only scaring less-knowledgeable folk into thinking Jailbreak == viruses
Finally! Now I can tell my friends that my iPhone can run all the stuff my desktop can!
SSC
Wederom zijn het alleen gebruikers van een gejailbreakte iPhone of iPod Touch die risico lopen.
Translation: Again are the only users of an iPhone or iPod Touch gejailbreakte at risk.
In summary, if you jailbreak your phone, install apps to make your phone a server, and don't take steps to secure it, you are an idiot and deserve whatever happens.
why is SSH being installed with a default password left in place? Talk about asking for trouble.
Cory Doctorow talking about cloud computing makes as much sense as George W Bush talking about electrical engineering.
Odd, the story called it a WORM.. which it is.
---- Booth was a patriot ----
>to the latest Apple firmware in order to ensure no malware is present."
If they flash to the latest apple firmware, will they be able to
Most importantly - will they be able to jailbreak the device after the update?
I see a future where Apple, the RIAA, and others might wish to write worms to help prevent people from hacking their devices or brick devices that have been "hacked".
"Science is about ego as much as it is about discovery and truth " - I said it, so sue me.
You just do this and that happens. As in "you run this and your phone gets even more awesome" or "you'll shut down your firewall be able to get movies in your pc" or things like that. But you dont have to understand what are really doing, or all that it implies. People are getting powerful things, and as childs are irresponsible about what could happen because their actions because they don't understand them.
It seem plain clear to us that having a common, default admin passwords in all the jailbroken devices is a very bad policy, but how many times we could had fell in a similar situation were are us who don't understand fully what we are using i.e. in other areas?
To make things worse, we complain a lot about products that takes the "safest" choice for us, not giving enough control/customization to the final (knowing enough?) user, making those impopular and so not taken even by the people that don't know (or don't want to know).