{"id":1219,"date":"2009-11-03T11:24:39","date_gmt":"2009-11-03T10:24:39","guid":{"rendered":"http:\/\/blog.intego.com\/?p=1219"},"modified":"2022-03-06T16:22:03","modified_gmt":"2022-03-07T00:22:03","slug":"iphone-ransomware-dutch-hacker-exploits-jailbroken-iphone-bug-and-asks-for-money","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/iphone-ransomware-dutch-hacker-exploits-jailbroken-iphone-bug-and-asks-for-money\/","title":{"rendered":"iPhone Ransomware? Dutch Hacker Exploits Jailbroken iPhone Bug and Asks for Money"},"content":{"rendered":"

Read Intego’s latest articles about ransomware on Apple devices<\/a>.<\/strong><\/em><\/p>\n

A Dutch hacker has come up with a novel way to make a few euros. Realizing that jailbroken iPhones are generally accessible via ssh, he “breaks into” them, then sends an SMS alert to their owners, telling them the phones are insecure. For 5 euros, he’ll be happy to tell them how to secure their phones.<\/p>\n


\n<\/center><\/p>\n

A bit of background. For those unfamiliar with the term “jailbreak”, it simply means exploiting a weakness in the iPhone so users can install unapproved applications. (Read Wikipedia’s explanation<\/a>.) Many users do this to get access to iPhone apps that Apple won’t approve. When an iPhone is jailbroken, ssh, or secure shell, access is available over a network. However, this access uses a default password that most users don’t change. Since this password is easy to find (Google is your friend), it’s a cinch for anyone to hack into a jailbroken iPhone, if they can find it.<\/p>\n

So this Dutch hacker “used port scanning to identify jailbroken iPhones on T-mobile Netherlands with SSH running,” according to an Ars Technica article<\/a> that links to a Dutch-language forum thread<\/a> explaining the trick. In other words, the hacker just scanned as many phones as he could find, and, in so doing, found those that were jailbroken.<\/p>\n

He then directs users, by sending them an SMS, to a web page, where he asks 5 euros for instructions on how to make the phone more secure. This is not technically “ransomware” – malware that usually encrypts files, then asks a user to pay to get a password to get access to the files again – but it’s close.<\/p>\n

This is not a complicated task. As Ars Technica says:<\/p>\n

security researchers have done similar port scanning in the past, and downloaded users’ SMS databases as a “proof of concept.” However, this is the first time that it seems the technique has been used in the wild. It’s worth noting that the technique is fairly trivial and could be done by anyone with even a modicum of networking know-how.<\/p><\/blockquote>\n

So, if you have jailbroken your iPhone, you would do well to change the default ssh password. Again, Google will help you perform this simple operation. If you don’t, any enterprising hacker can get access to everything your phone contains. You don’t want that to happen…<\/p>\n

How can I learn more?<\/h3>\n

\"\"<\/a>Each week on the Intego Mac Podcast<\/strong><\/a>, Intego’s Mac security experts discuss the latest Apple news, security and privacy stories, and offer practical advice on getting the most out of your Apple devices. Be sure to follow the podcast<\/strong><\/a> to make sure you don\u2019t miss any episodes!<\/p>\n

You can also subscribe to our e-mail newsletter<\/strong><\/a> and keep an eye here on The Mac Security Blog<\/strong><\/a> for the latest Apple security and privacy news. And don’t forget to follow Intego on your favorite social media channels: \"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Read Intego’s latest articles about ransomware on Apple devices. A Dutch hacker has come up with a novel way to make a few euros. Realizing that jailbroken iPhones are generally accessible via ssh, he “breaks into” them, then sends an SMS alert to their owners, telling them the phones are insecure. For 5 euros, he’ll […]<\/p>\n","protected":false},"author":3,"featured_media":63199,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[7,13],"tags":[9,109],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n