iPhone Malware – iPhone/iBotnet.A | Mac Hack PC

Home » 2G, 3G, 3G S, Hack News, Linux, Mac OS X, Windows, iPhone

iPhone Malware – iPhone/iBotnet.A

24 November 2009 Comments

This is a very crucial month for iPhone Jailbreakon user/owners. Here it comes the third iPhone worm which is called iPhone/iBotnet.A. Recently we have posted two articles on iPhone Virus (iKee/RickRoll & iPhone/Privacy.A). The first iPhone virus changes your Wallpaper and second one copied your data.

The new Malware iPhone/iBotnet.A, is by far the most sophisticated iPhone malware yet: it is not only a worm, capable of spreading across a network, but also hijacks iPhones or iPod touches for use in a botnet.

What is botnet? Botnet is a network of infected computers or devices that can be controlled by hackers to attack other computers, serve malware, send spam, serve pages or images, and much more.

Description on iPhone/iBotnet.A: First this malware changes your default SSH password so that you will not be able to change the password. Then it will connect to a server in Lithuanian to download file and data to the effect iPhone. These files will help, send your data to a remote server. Finally, it changes an entry in the iPhones /etc/hosts file for a Dutch bank web site, to lead Dutch users who connect to this bank site to a bogus site, presumable to harvest user names and passwords.

iPhone - iBotnet.A Alert

Here are some Frequently Asked Questions

Question 1: How can I STOP iPhone/iBotnet.A Malware to enter my iPhone?

Answer 1: You need to change your iPhone root password. By Default its “alpine”.

Question 2: How do I change my root password?

Answer 2: Please follow these steps

Install Mobile Terminal from Cydia
Once installed, start Terminal from your iPhone
Now type “su root” and hit return
Enter your password “alpine” and hit return – by default is “alpine”
Now enter “passwd root” and hit return
Now, it will prompt you to enter NEW PASSWORD.
Enter NEW PASSWORD.
Confirm your PASSWORD

*******these commands are case sensitive.

Question 3: I never change my SSH default password. But, my SSH default password (“alpine“) doesn’t change. Why?

Answer 3: In this case, most probably you might have effect with iPhone/iBotnet.A. Try “ohshit“. Because, when effected with this iPhone/iBotnet.A malware, it will change your default password from “alpine” to “ohshit”.

Question 4: OMG! Can I change the SSH password from “ohshit“?

Answer 4: You could. But, your iPhone got effect with iPhone/iBotnet.A. You must wipe and restore your iPhone using iTunes to get rid of this malware.

Question 5: How do I get rid of iPhone/iBotnet.A Malware.

Answer 5: The only way is to wipe and restore your iPhone using iTunes to get rid of this malware. As we have mentioned, this Malware gets into the network. So, we recommend that you scan your Mac or PC and get rid of them.

Question 6: I have installed SSH but, I turn off when I don’t need it. Do I still change the default password?

Answer 6: Its a very good practice to keep it turned OFF when not needed. But, I recommend you to change the default password.

Question 7: I have a jailbreak iPhone But, SSH is not installed. Do I need to worry about it?

Answer 7: iPhone/iBotnet.A malware, enters where SSH is running with default password. So, in your case you don’t have to worry about this virus.

Recommendations:

FIRST and most important – Change the default SSH (root) password.
When you are not using SSH – Turn it off (Install SBSettings from Cydia and you can use the toggle to Turn ON and OFF)
Be very careful when joining any Public WiFi Network.

You can always follow us @machackpc for more Tips, Tweaks, Hints, Hacks and Updates on your PC, Mac, Linux, iPhone and any other technology related.

Related Articles you may be interested in..

Source[Via]- Happy Hacking..

If you enjoyed this post, make sure you subscribe to my RSS feed!