Posts Tagged ‘Protect your iphone from worm’

First Worm SSH

A week a go a German hacker wrote that he had hacked several Iphone on T-mobile Germany with some simple tools from his PC. He scanned the T-Mobile 3g IP range, and he got like thousands of IP with the SSH port open (port 22). Then using a simple SSH client such as putty, he got connected to them with the default Iphone room password which is:

Username: root

Password: alpine

Today on Australia, a hacker wrote a worm thanks to this issue reported by the German hacker, and the worm now its spreading across the Australia. It is not very dangerous, because it simple changes the wallpaper of your Iphone with a nasty singer from the 80’s . This worm affects only the JAILBROKEN Iphones, and it is easily to protect, and i recommend you to perform this steps right away.

1. First Open Cydia, wait for the leading process and click on Search icon which is located on the bottom right side.

2. Write Terminal or Mobile Terminal, and the application will show up, click over its name.

3. On the top right side you will have to click on Install and Confirm. Wait few sec for the cydia to finish the installation

4. Close the Cydia and find the Mobile Terminal Icon on your Iphone springboard.

5. Run Mobile Terminal and a screen similar to Linux command prompt will show up.

6. Type without quotes “passwd” and press return

7. Will prompt you to enter the old password, so type the default iphone password which is “alpine” without quotes.

8. Now it will prompt you to write a news password. Choose any password which is more then 5 letters, any password which you’ll choose will be better then your default one. Press return when you’ll finish.

9. You will have to confirm the chosen password once again, so enter it and press return.

10. That’s all your safe.

You might say ok so what if the hacker replaces my wallpaper foto, BIG DEAL , your wrong my brother. It is very easily to write a new worm, which will upload all your camera roll photos from iphone to flickr on some ftp server, and i bet you have something to hide there. Also if you connect to a public WIFI, any user with a laptop and a software such as WinSCP can connect to your Iphone and within a minute he can download all pic, videos, songs … from your Iphone to hes/her laptop hard drive.

Another way to protect is to disable the SSH on your jailbroken Iphone. You can do this also very easily from SB setting using the SSH togles. If you cant see it on your screen, go to SBSettings option and configure it to display the SSH toggle.