First iPhone Worm Infecting

[KabaModern]

http://www.pcworld.com/businesscente...wallpaper.html

Just another use of SSH, but it could be turned into something more malicious. Change your default passwords!

[carrera.owner]

Here's how (courtesy of another user)....

Go to Cydia, manage tab, packages, and see if OpenSSH is on the list of installed packages.

If it is, download and install a package from Cydia called MobileTerminal.

Start MobileTerminal, type in "su", then type in the default password "alpine", then type in "passwd", and set a new password (don't use " quote marks " in any of these commands)

[mr.reggaeton72]

oh dear, i think this is the first of many, is the same with computers, as people see a growing number of users, it will draw more attention for virus programmers, to write a virus for that platform..

thats what i think..

[Londonrockz568]

Originally Posted by mr.reggaeton72

oh dear, i think this is the first of many, is the same with computers, as people see a growing number of users, it will draw more attention for virus programmers, to write a virus for that platform..

thats what i think..

I beg to differ.

The only reason this happened was because people jailbreak the phone and leave SSH set to on. If you dunno what SSH is then google about it. To my knowledge if you have SSH turned off there is no way to remote access someone's SSH and use the default password to get in.

This news is soo old anyway because if you leave SSH on anyone can breach private data on the iphone. If the person has SSH off, or isnt even jailbroken or is jailbroken but never installed SSH, hacking or making a virus for the iphone is time consuming and wouldnt yield much...at least at the rate that apple updates its firmwares. The main goal of a hacker/virus/worm is to infect as much as possible. For starters, its a mobile platform, SSH must be on, the persons iphone must be jailbroken in order to even have SSH, the persons SSH password must be set to the default and they have to out hack the rate at which apple updates firmwares.

The effort vs "payout" ratio isnt worth it.
SSH, and blogs/jailbreaking blogs etc have been saying from day one not to leave SSH on because others can breach your iphone. No one listens, and when it happens it makes news which gets interpreted by millions as "theres a virus out for the iphone now".

Its deff not going to be a trend.... its easier to just infect computers anyway.

[styfle]

It would be the same as using your computer on a network while leaving your shared folder as your root folder...
Not a worm, just carelessness.

[TarekElsakka]

Originally Posted by carrera.owner

Here's how (courtesy of another user)....

Go to Cydia, manage tab, packages, and see if OpenSSH is on the list of installed packages.

If it is, download and install a package from Cydia called MobileTerminal.

Start MobileTerminal, type in "su", then type in the default password "alpine", then type in "passwd", and set a new password (don't use " quote marks " in any of these commands)

Thank you, sir. Saved me the hassle of searching.

[KabaModern]

Originally Posted by styfle

Not a worm, just carelessness.

Actually, it would be considered a worm. If you read the article they mention this worm changes the user's wallpaper and then seeks out other iPhones to infect. Which is exactly what a worm does: sends copies of itself out to other devices without intervention from the EU.

[iNinja]

A worm spreads through open network connections right?

If you have SSH switched off, theres noway you can be caught out.

[KabaModern]

Originally Posted by iNinja

A worm spreads through open network connections right?

If you have SSH switched off, theres noway you can be caught out.

That is correct. AFAIK, if you have SSH turned OFF, you're fine. It's infecting iPhones through the open SSH tunnel. I'd even recommend changing the root and mobile passwords so when you do have SSH turned ON, you're not as easily vulnerable.

[Londonrockz568]

Exactly everyone. All it takes is one... or three simple steps.

One step being turn it off when not using it.
OR The three it takes to change the passwords.

Theres nothing more, or nothing less to it.