NEWS / MOBILE PHONES

First iPhone Worm Attacks

09 Nov, 2009, 10:00 am IST | by tech2 News Staff | Mobile phones

Sophos is reporting that jailbroken Apple iPhones in Australia have been infected by a worm that has changed their wallpaper to an image of 1980s pop singer Rick Astley.


Though there are no reports of the worm having spread to other countries, it isn't unlikely that it has.

The worm is capable of breaking into jailbroken iPhones if their owners have not changed the default password after installing SSH. Once installed, the worm appears to attempt to find other iPhones on the mobile phone network that are similarly vulnerable, and installs itself again.

On each installation, the worm - written by a hacker calling themselves "ikex" - changes the lock background wallpaper to an image of Rick Astley with the message:

ikee is never going to give you up

The worm will not affect users who have not jailbroken their iPhones or who have not installed SSH.

What's clear is that if you have jailbroken your iPhone or iPod Touch, and installed SSH, then you must always change your root user password to something different than the default, "alpine". In fact, it would be a good idea if you didn't use a dictionary word at all.

Sophos Labs is analyzing the worm's code, which suggests that at least four variants have been written so far. One of the attributes of the latest variant (labeled the "D" version) is that it tries to hide its presence by using a filepath suggestive of the Cydia application.

The source code is littered with comments from the author suggesting the worm has been written as an experiment. One of the comments reprimands affected users for not following instructions when installing SSH. Had they changed the default password the worm would not have been able to infect them.

It looks like the worm does nothing more malicious than spread and change the infected user's lock screen wallpaper. But, of course one can never be too sure. Hackers with intent to cause damage could experiment and deploy a worm with a more serious payload.

The source code of the worm says at its start:

/ "ikee virus" by ikex
/ Revision: 10 (Variant D)

A quick trawl of the Whirlpool forum where users are reporting that their iPhones are unexpectedly displaying an image of Rick Astley, reveals a user calling themselves "ike_x".

According to ike_x's user profile on the Whirlpool forum his nearest city is Sydney, Australia . Further searching on the internet reveals other pages seemingly related to ike_x of Wollongong, New South Wales, using the name "Ash" or "Ashley Towns".

The worm's author has posted an explanation inside the code. It says:

Why?: Boredom, because i found it so stupid the fact that on my initial scan of my 3G optus range i found 27 hosts running SSH daemons, i could access 26 of them with root:alpine. Doesn't anyone RTFM anymore?

Tags: iPhone , Apple

RELATED STORIES

Gadgets are most popular online purchases, says eBay survey

Gadgets are most popular online purchases, says eBay survey

Over the last year, e-commerce has set its foot firmly on the Indian terrain, owing to the increase in the number ...

Envent introduces Bluetooth Slider Keyboard Case for the iPhone 4

Pebble e-paper watch supports apps for iPhone and Android

Next iPhone to have the most significant upgrade yet, claims analyst

Critics say Foxconn not off hook after radio retraction

Foxconn not to take legal action after retraction

Radio show on Apple's Chinese workers is retracted

iPhone 4S vs. Samsung Galaxy S II Drop Test

17 Oct, 2011, 01:19 pm IST

iPhone 4S vs. Samsung Galaxy S II Drop Test

Will It Blend? - iPhone

11 Jul, 2007, 12:01 am IST

Will It Blend? - iPhone

Apple - iPhone 4S - TV Ad - Joke

24 May, 2012, 07:38 am IST

Apple - iPhone 4S - TV Ad - Joke

Men in Black 3 Launch Trailer - iPhone, iPad & Android Official Game

22 May, 2012, 11:51 pm IST

Men in Black 3 Launch Trailer - iPhone, ...

 

features

Unboxing and first impressions of the LAVA XOLO X900

Unboxing and first impressions of the LAVA XOLO X900

The XOLO made its way into our labs recently and needless to say, our tech

By Shayne Rana

Mobile Grudge Match - Samsung Galaxy S III vs HTC One X

Mobile Grudge Match - Samsung Galaxy S III vs HTC One X

Last night, we witnessed Samsung unveiling, what they have been referring...

By Roydon Cerejo

Samsung Galaxy S III - What to expect

Samsung Galaxy S III - What to expect

Apple fans have the iPhone 4S and Android fans have the Samsung Galaxy S2.

By Karan Shah , Rossi Fernandes

MORE FEATURES

Photos

Lava XOLO X900 Unboxing

Lava XOLO X900 Unboxing

04 May, 2012, 05:28 PM

2.8

Samsung Galaxy S III Launched

Samsung Galaxy S III Launched

04 May, 2012, 01:04 AM

4.7

Nokia 603 Review

Nokia 603 Review

09 Apr, 2012, 01:58 PM

3.4

MORE PHOTOS