Welcome Guest. | Log In| Register | Membership Benefits
Dark Reading's CSIsland Weblog
Topics:   SophosLabs Insights

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share

World's First iPhone Worm Rick-Rolls Wallpaper


Posted by Graham Cluley, Nov 8, 2009 09:05 AM

Users of insecure, jailbroken iPhones are reporting their smartphones have been hit by a worm that turns their lock wallpaper to that of 1980s pop star Rick Astley.

It may seem mostly harmless with its wallpaper-changing payload, but the first-ever worm to spread via iPhones could be an omen of more sinister attacks to come.

SophosLabs is warning iPhone users who have jailbroken their devices to ensure they have not left their smartphones open to infection.

Affected users in Australia have reported the wallpaper shown when they lock their iPhones is changed to an image of 1980s British pop star Rick Astley, with a message:

ikee is never going to give you up

Wallpaper of Rick Astley displayed by the ikee iPhone worm

The worm, which could have spread to other countries, is capable of breaking into jailbroken iPhones if their owners have not changed the default password ("alpine") after installing SSH. Once in place, the worm hunts for other iPhones that are similarly vulnerable on the mobile phone network, and installs itself again.

This isn't the first time hackers have taken advantage of poorly secured jailbroken iPhones that have not had their SSH passwords changed. About a week ago, iPhone users in the Netherlands were told they would have to pay 5 Euros ransom to gain control of their cellphones after a hacker used a similar trick -- although on that occasion the attack did not spread in a viral manner.

This latest incident, however, raises the stakes -- and it wouldn't be hard to imagine that more hackers might become intrigued about the possibility of striking jailbroken iPhones in this fashion to deploy more sinister payloads than an image of Rick Astley in future.

Analysts at SophosLabs are continuing to examine the iPhone worm's code, and new information is being published on my blog on the Sophos Website.

Graham Cluley is senior technology consultant at Sophos, and has been working in the computer security field since the early 1990s. When he's not updating his other blog on the Sophos website, you can find him on Twitter at @gcluley. Special to Dark Reading.

« WiFi = Mobile Phone | Main | Insider Threat Reality Check »



Sign up now for the weekly InformationWeek Blog Newsletter.


This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




Related Content

Sponsored by:
sponsor logo
Buyers Guide to Endpoint Protection Platforms
Discover how you can leverage endpoint security and data protection to provide simplified cross-platform security, centralized management, and control of devices, apps, and network access.

Enabling a safer internet: The positive approach to web security
With one new infected webpage discovered every 4.5 seconds, it is essential you have the three pillars of protection - revealed in this whitepaper - to defend your organization against the sophisticated web threats of today.

Security Threat Report: July 2009 update
In 2009, cybercriminals are turning their attention to Web 2.0, social networking platforms, and alternative tools such as PDFs. This security threat report examines new malware trends, and explains how businesses can defend against them.