Article - RickRoll iPhone (Oz)

trout

iPhone owners in Australia awoke this weekend to find their devices targeted by self-replicating attacks that display an image of 1980s heart throb Rick Astley that's not easily removed.

The attacks, which researchers say are the world's first iPhone worm in the wild, target jailbroken iPhones that have SSH software installed and keep Apple's default root password of "alpine." In addition to showing a well-coiffed picture of Astley, the new wallpaper displays the message "ikee is never going to give you up," a play on Astley's saccharine addled 1987 hit "Never Gonna Give You Up."

Link to full article here -> http://www.theregister.co.uk/2009/11/08/iphone_worm_rickrolls_users/

Be careful out there.

mad muffin

I'm so glad this guy did this...will teach people some common sense.;)

bnt

And the message is: if you're going to jailbreak your iPhone or iPod Touch, you need to change your device's root password. Install a Terminal app, start it up, and when you get to the command line, enter the following and follow the prompts:

passwd root

I can't remember whether you're prompted for the old password, but enter "alpine" if you are, followed by a good new password, twice. By "good" I mean something not in a dictionary, preferably with Capitals and numbers.

(I suppose you could try to remove OpenSSH, but that would defeat one of the primary reasons for jailbreaking the device in the first place: secure remote access to the file system.)

mad muffin

bnt wrote: »

And the message is: if you're going to jailbreak your iPhone or iPod Touch, you need to change your device's root password. Install a Terminal app, start it up, and when you get to the command line, enter the following and follow the prompts:

passwd root

I can't remember whether you're prompted for the old password, but enter "alpine" if you are, followed by a good new password, twice. By "good" I mean something not in a dictionary, preferably with Capitals and numbers.

(I suppose you could try to remove OpenSSH, but that would defeat one of the primary reasons for jailbreaking the device in the first place: secure remote access to the file system.)

I never use SSH, iFunBox + USB cable all the way for me.;)

KingCong

Are jailbroken iPhones only vulnerable if you have OpenSSH installed?

trout

KingCong wrote: »

Are jailbroken iPhones only vulnerable if you have OpenSSH installed?

This exploit attacks jb'd iPhones, with SSH installed AND the default root password of "alpine" still in effect.