Welcome Guest. | Log In| Register | Membership Benefits
Dark Reading's CSIsland Weblog
Topics:   SophosLabs Insights

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share

World's First iPhone Worm Rick-Rolls Wallpaper


Posted by Graham Cluley, Nov 8, 2009 09:05 AM

Users of insecure, jailbroken iPhones are reporting their smartphones have been hit by a worm that turns their lock wallpaper to that of 1980s pop star Rick Astley.

It may seem mostly harmless with its wallpaper-changing payload, but the first-ever worm to spread via iPhones could be an omen of more sinister attacks to come.

SophosLabs is warning iPhone users who have jailbroken their devices to ensure they have not left their smartphones open to infection.

Affected users in Australia have reported the wallpaper shown when they lock their iPhones is changed to an image of 1980s British pop star Rick Astley, with a message:

ikee is never going to give you up

Wallpaper of Rick Astley displayed by the ikee iPhone worm

The worm, which could have spread to other countries, is capable of breaking into jailbroken iPhones if their owners have not changed the default password ("alpine") after installing SSH. Once in place, the worm hunts for other iPhones that are similarly vulnerable on the mobile phone network, and installs itself again.

This isn't the first time hackers have taken advantage of poorly secured jailbroken iPhones that have not had their SSH passwords changed. About a week ago, iPhone users in the Netherlands were told they would have to pay 5 Euros ransom to gain control of their cellphones after a hacker used a similar trick -- although on that occasion the attack did not spread in a viral manner.

This latest incident, however, raises the stakes -- and it wouldn't be hard to imagine that more hackers might become intrigued about the possibility of striking jailbroken iPhones in this fashion to deploy more sinister payloads than an image of Rick Astley in future.

Analysts at SophosLabs are continuing to examine the iPhone worm's code, and new information is being published on my blog on the Sophos Website.

Graham Cluley is senior technology consultant at Sophos, and has been working in the computer security field since the early 1990s. When he's not updating his other blog on the Sophos website, you can find him on Twitter at @gcluley. Special to Dark Reading.

« WiFi = Mobile Phone | Main | Insider Threat Reality Check »



Sign up now for the weekly InformationWeek Blog Newsletter.


This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




Related Content

Sponsored by:
sponsor logo
Seven for 7: Best practices for implementing Windows 7
Windows 7 is here to stay. Discover how to enhance your overall enterprise security by taking advantage of its new powerful endpoint security features.


Sophos Security Threat Report: 2010
SophosLabs received 50,000 new malware samples every day in 2009. Malware attacks are broadening and becoming more evasive with social networking sites and new computing platforms becoming primary targets for hackers. Read the 2009 security threats trends and learn how to protect yourself in 2010.

How To Protect Your Critical Information Easily
Safeguarding massive amounts of sensitive, confidential data--from legally protected personal information to intellectual property and trade secrets--from malicious attacks and accidental loss is one of IT's biggest challenges. With employees having greater mobility than ever before to work outside the office, the job of protecting data has never been more difficult.