We told you not to jailbreak your iPhone, but you had to be super cool and rebellious. Per BBC News, jailbroken iPhones could be vulnerable to a new, malicious worm that can allow remote access and control without the owner’s knowledge or permission. It’s been estimated that hundreds of users are currently affected by a worm that targets users of “jailbroken” iPhones who live in the Netherlands and use the bank ING Direct. But security company F-Secure told stated that the currently isolated issue could easily jump to thousands of handsets. The worm is reportedly spread between phones when they share the same Wi-Fi spot.
In order for an iPhone to be vulnerable to the new worm, they must have willingly modified their handset’s software to allow them to run unauthorized code. Phones can be jailbroken to run applications or modify the system in ways not approved by Apple.
The worm only affects jailbroken phones that have SSH (secure shell) installed, without the default password — “alpine” — changed. It employs the same method as a previous worm, Ikee, that was not malicious. Instead, the wallpaper-changing prank simply changed the user’s background to a picture of 1980s pop star Rick Astley, who sang the 1987 hit “Never Gonna Give You Up.”
The new worm reportedly has botnet functionality and connects to a Web-based command and control center based in Lithuania.
For now, the worm is only aimed at customers who live in the Netherlands and bank with ING Direct. The company has stated that it intends to put a warning on its Web site.