All the latest UK technology news, reviews and analysis

Malicious worm targets jail-broken iPhones

by Phil Muncaster

More from this author

23 Nov 2009

Comments: 3

  • Tweet this
Apple iPhone
Security experts have renewed warnings against unlocking the iPhone

Users of jail-broken iPhones are being warned of yet another piece of malware after the discovery over the weekend of a worm with the ability to steal online banking credentials.

The new 'Duh' malware is likely to be based on the original Ikee worm which was spread a couple of weeks ago by a young hacker in Australia. Both target jail-broken iPhones with OpenSSH installed and the default password intact.

However, security experts have warned that its characteristics are much more malicious, and that hackers are likely to continue to propagate such malware if they can make money from it.

"It is much more serious than Ikee because it is not limited to infecting iPhone users in Australia, and communicates with an internet 'control and command' centre, downloading new instructions and effectively turning your iPhone into part of a botnet," said Sophos senior technology consultant Graham Cluley.

"Furthermore, it appears to be designed to steal information from users of online banking services."

Cluley's colleague at Sophos, Chester Wisniewski, added that the worm appears to be attacking IP ranges from a larger range of internet service providers. He recommended users to restore their phones to the Apple-supplied firmware, or think about choosing a different phone.

"If you want freedom of application choice, perhaps you should consider an Android-based phone rather than hacking your device into a potentially insecure state," he said in a blog post.

"This further demonstrates that iPhones are not ready for the business environment. Apple has made a great effort at preventing people from cracking into their software and unlocking/jail-breaking their devices, but where there is a will, there will always be a way."

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Project Manager -Commodities,Oil,Gas,Agriculture,Power- £90,000

Project Manager, London - Software Solutions (Project...

Project Manager - Hampshire - up to £32K FTC

Project Manager - Hampshire - up to £32K - Fixed Term...

Senior Customer Support Consultant - 2nd/3rd Line Support - SAS

Senior Customer Support Consultant - 2nd/3rd Line Support...

Front Office Application Developer - Investment Banking - Londo

C++/C#/Java developer for a global investment bank within...

To send to more than one email address, simply separate each address with a comma.