New Worm Attacked Jailbroken iPhones

Security.nl folks discovered a new worm that attacks jailbroken iPhones and iPod Touch devices.

It works like this: the warm alters the SSH (Secured Shell) password, connects with the help of Wi-Fi with the creator and shares banking details from user’s device. According to Chester Wisniewski, Sophos Security Researcher, the worm is considered to be harmful.

The new worm attacks only the jailbroken iPhone OS devices while the rest stays unhurt. The worm settles itself when the device is starting to load and then connects to a server through HTTP in order to download the stolen data. Mikko Hypponen noted that the worm connected to a command that was based on a web and controlled center through such IP as 92.61.38.16 that was considered to be Lithuanian.

The worm alters default password of the device from “alpine” to “ohshit” and appoints a unique ID in order it will be possible to make investigation for the attacker. One should say that people who use the T-Mobile service from Netherlands, Australia and other countries were infected by the worm. The infection extends by means of Wi-Fi very quickly.

Those users that have jailbroken iPhones are able to download MobileTerminal App from the Cydia package manager and alter the password.

Category: Technology News