Rickroll virus targets iPhones

By Liam Tung, ZDNet.com.au
09 November 2009 11:28 AM
Tags: ikee, security, apple, f-secure, iphone, sophos, virus, root

An Australian has released a virus for the Apple iPhone, ikee, which replaces the infected device's background picture with an image of Rick Astley.

Astley%20copy.jpg

Never gonna give you up
(Credit: Whirlpool ID, Batman)

Security companies Sophos and F-Secure have issued warnings to owners of jailbroken iPhones to change root log-in passwords immediately. All iPhones are issued with the same root log-in password.

The worm, labelled "ikee", spreads using SSH (secure shell) protocol, which iPhones use to exchange data on a network.

iPhones are not shipped with SSH enabled. Users who do not have the messaging feature turned on should not be vulnerable; however, Sophos head of technology Paul Ducklin said if the feature has been enabled and the root password has not been changed, "you are woefully insecure".

According to fellow Sophos security consultant, Graham Cluley, the author of the virus is believed to be Ashley Towns, who operates on Twitter under the @ikee account.

F-Secure chief research officer Mikko Hyponnen has commented on the company's blog that the virus searches for nearby targets by scanning a handful of Australian IP ranges. He has included instructions for changing the root password on jailbroken iPhones.

While Sophos' Ducklin has pointed to the virus' action, which turns off SSH once it has infected a device and therefore leaving it protected from further attacks, Hyponnen warns that the author's decision to release the full source code means there will likely be variants on the horizon.

Users of broadband forum Whirlpool began posting comments about the virus last Friday afternoon.

Advertisement

Talkback 4 comments

    love it Rick -- 10/11/09

    we need more of this type of fun virus.

    virus spreader need to be taught a lesson Anonymous -- 11/11/09 (in reply to #320391206)

    I dont agree with "love it" and it is about time the governments of the world increased penalties and perhaps put virus writers in line with espionage crimes.
    20 years hard labour sounds about right...why should something I own be attacked whether in jest or not..cmon Krudd lets get serious.

    Grow up. Anonymous -- 09/01/10 (in reply to #320391275)

    You're an idiot, really.
    20 years for a harmless joke. Stop your whining and grow up.

    Wot problem?? Stuart French -- 12/11/09

    At a recent ""iPhone for business" launch by a local supplier I asked the presenter about anti-virus availability.

    Reply? "Not needed, but I'm sure they'll get around to it one day just to make the 'PC' guys happy."

Add your opinion

Latest Videos

Blogs

  • Darren Greenwood Telecom NZ savings damage prospects
    If Telecom NZ wants to have any of the NZ$1.5 billion the government intends to spend on its new broadband network, it had better think long and hard before offshoring 1500 jobs.
  • Array iiNet: The whys and what nows
    Last week the Federal Court ruled that internet service providers are not responsible for copyright violation by their customers. This is an important decision not just for iiNet, which spent around $4 million defending the case, but for all ISPs in Australia and, indeed, globally.
  • Array Govt, hurry up with releasing data
    A programmer scraped data from the My School website to make some really cool heat maps showing regions of smart schools — no thanks to the government, which didn't supply the data in any useful kind of format.
  • More blogs »

Tags

Back to top

Featured