New Worm Steals notes From Jailbroken iPhones
Just two weeks after Apple iPhone users in Australia reported jailbroken iPhones came under siege by attackers, a new version of the iPhone worm is posing a threat. Symantec reports the new worm targets jailbroken iPhones running SSH that are still using the default password. The worm can reportedly steal info stored on the iPhone as well as connect back to the attacker, giving them control of the phone.
“Unlike the first iPhone worm, that one appears to cover a much broader range of IP addresses, including UPC in the Netherlands, Optus in Australia, possibly a Hungarian and a Portuguese provider, T-Mobile and potentially many others,” said Symantec’s John McDonald. “And although that specific incarnation seems to be very similar in functionality to the hack tool we blogged about, that one supposedly runs and spreads directly from an infected iPhone, not from a computer.”
Remote-Control Theft
that latest attack appears to be designed to create a botnet
“The hackers can next order the iPhones to do whatever they wish,” he explained. “For instance, they could be instructed to send spam, spread more malware, or steal knowledge. In that case the worm appears to be specifically trying to steal knowledge from users of a Dutch bank.”
The earlier Ikee worm wasn’t written with an obvious financial motivation and appears to have been designed to spread a picture of Rick Astley, Cluley said. However, he added, there is no doubt that the author of Ikee helped the creators of that worm by releasing his source cipher, giving them a template upon which to create their own more malicious attack.
More Worms Expected
After the release of the first iPhone 3G worm two weeks ago, Sophos…
Original post by dhiram
No comments yet. Be the first.
Leave a reply
