Rickrolling worm infects jailbroken iPhones lol

[dhlizard]

First Malicious iPhone Malware Detected

Well we knew it wouldn't be long. First SSH injected malicious malware

iPhone/Privavy.A

Now the real reason to change those passwords !

 

[Blueline29]

Found this to be the fastest and easiest way to change the root password:

http://iphoneoverdose.com/2008/how-to-change-the-default-alpine-ssh-password-on-your-iphone/

Thanks for posting that link!

 

[ViViDboarder]

Thanks for posting that link!

Those directions are incomplete and leave you VERY vulnerable still. Follow my directions in my post on this thread https://forums.macrumors.com/posts/8792161/

There is a section if you are doing it over an SSH client or from MobileTerminal.

The part that the link you were referring to is missing is changing the root password. It only instructs changing the mobile password. With root access the hacker has full access to your device still. You need to change both.

You read my post. You need to 'su root' to switch to root and then run 'passwd' again to change that password too.

I can't stress how important this extra step is. If you only follow the directions on that link you are not at all safe. You must follow my directions in this thread and change BOTH passwords (you can change them to the same thing, just not 'alpine').

 

[dhlizard]

Agree with ViViDboarder.

I posted the link as a resource to learn how dangerous the malware is.

If the root password change is missing, the author has made a big omission.

Both root and mobile password need to be changed.

 

[dZp]

Already on everybody's iPhone that has Cydia installed:
Cydia > User Guides > Open SSH Access How-To > Change Default Password

http://cydia.saurik.com/password.html

Then again, for those that have installed OpenSSH through Cydia and haven't changed the default password and haven't read the User Guide, all I can say is: you had it coming!

 

[uid15]

You know, I never did understand why "Rick Rolling" was seen as such an annoying situation to have been put in; he's one of the most talented and wonderfully tuneful singers of the 1980s; his songs are sincere and happy, and an absolute joy to listen to... so this whole "Rick Rolling" nonsense has always been laughably impotent to me, as he's just a superb singer.

The crazy internet.

 

[Will22]

You know, I never did understand why "Rick Rolling" was seen as such an annoying situation to have been put in; he's one of the most talented and wonderfully tuneful singers of the 1980s; his songs are sincere and happy, and an absolute joy to listen to... so this whole "Rick Rolling" nonsense has always been laughably impotent to me, as he's just a superb singer.

The crazy internet.

6 years, now that is a thread back from the dead!

As for Rick himself, nice guy but I prefer Pink Floyd.

 

[kalirob99]

Those directions are incomplete and leave you VERY vulnerable still. Follow my directions in my post on this thread https://forums.macrumors.com/posts/8792161/

There is a section if you are doing it over an SSH client or from MobileTerminal.

The part that the link you were referring to is missing is changing the root password. It only instructs changing the mobile password. With root access the hacker has full access to your device still. You need to change both.

You read my post. You need to 'su root' to switch to root and then run 'passwd' again to change that password too.

I can't stress how important this extra step is. If you only follow the directions on that link you are not at all safe. You must follow my directions in this thread and change BOTH passwords (you can change them to the same thing, just not 'alpine').

Good points. You should make a dummy walkthrough for those less techy that might visit here. As you pointed out, that one guide was severely lacking and OpenSSH has its reasons for staying installed.