Hacker breaks into jailbroken iPhones, asks for $7
A hacker in the Netherlands broke into some jailbroken iPhones and sent text messages to the owners asking them to pay to find out how to secure their phones, according to postings in a Dutch forum called Tweakers.net.
One of the victims posted a screenshot from his iPhone of the SMS received. It said: "Your iPhone's been hacked because it's really insecure! Please visit doiop.com/iHacked and secure your iPhone right now! Right now, I can access all your files."
The URL provided now displays a message indicating that it was reported for spam or phishing abuse and has been deactivated.
Ars Technica reports that before the page was removed, it asked that victims send 5 euros ($7.36) to a PayPal account and then await an e-mail with instructions on how to secure the phone. The fix probably would involve restoring the factory settings, according to the Ars Technica post.
"If you don't pay, it's fine by me," the hacker's page said. "But remember, the way I got access to your iPhone can be used by thousands of others--they can send text messages from your number (like I did), use it to call or record your calls, and actually whatever they want, even use it for their hacking activities! I can assure you, I have no intention of harming you or whatever, but, some hackers do! It's just my advice to secure your phone."
Apparently, the hacker used port scanning to identify phones on the T-Mobile network in the Netherlands running SSH (Secure Shell network protocol), which is commonly used by jailbroken iPhones and allows a user to "log in via Terminal and run standard UNIX commands," according to Ars Technica.
iPhone users who don't change the default root password after jailbreaking the device leave the phones vulnerable to attack, the site said.
For the most part, users jailbreak iPhones and iPods so they can run unauthorized applications on them. Doing so violates the terms of service, however, and means they aren't able to get support on the devices thereafter.
This is the first time this type of port scanning has been used in the wild, according to Ars Technica.
"The technique is fairly trivial and could be done by anyone with even a modicum of networking know-how," the blog post warns.
Users of jailbroken iPhones can remove the SSH daemon when not in use to prevent against this type of attack, the post adds.
"This incident highlights the fact that jailbreaking removes the security mechanisms that Apple has in place for the iPhone OS," the post concludes.
Updated 2:30 p.m. PST the hacker has allegedly posted a fix for the hack online and apologized, according to an update on Ars Technica.
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor. 
...is that the default root p/w on a jailbroken phone then, or ...?
Gad - no wonder it was so easily broken (didn't even have to get past the "a" section of the dictionary...)
According to other reports that I read yesterday "alpine" is the default password. See http://arstechnica.com/apple/news/2009/11/dutch-hacker-holds-jailbroken-iphones-hostage-for-5.ars
Yes, "alpine" is the default root account password in the iPhone OS.
Unfortunately since every app is run as root, this leaves the device rather easily exploitable.
...before or after jailbreaking?
@ ikramerica--2008 -- there should be more options than just running everything as root. Changing the password is one thing -- what if there's an exploitable weakness (in the telnet daemon or in any other service running on the phone)? Everything shouldn't be running as root -- otherwise executing remote code is the only challenge to pwning the device -- there is no privilege escalation or anything else required (i.e. no layers of security). That does not mean there are tons of holes to exploit. It merely means that if there are any, they'll be really deadly when they are exploited.
By definition, on a jailbroken iPhone there is at least one exploitable hole -- i.e., the hole exploited to jailbrake the phone to begin with.
Excellent point sir!
/reference tricycle vs motorcycle argument
When this happen?
Oh ya, you must mean this...
http://www.itpro.co.uk/blogs/daveyw/2009/11/03/80-percent-of-viruses-love-windows-7/
+1
the alpine password has been known for almost 2 years, long ago it was recommended that jailbreakers should change it.
HELLLLLLOOOOOO?
My iPhone has an Apple logo on it. It's already perfect and invulnerable.
Since you are so dedicated to opening up your phone's OS, have fun hacking your winmo or android phone, and lets see how useful/secure it really is.
Reference BS vs. truth argument.
This rather seems to be the reason for clueless trolls and fanboys to come out of their holes.
Apple should fix their insecure stuff. They are apparently nearly as bad as MS.
When you buy a new car, make sure it's grey with no options. NEVER change the radio station or adjust the seat and/or mirrors. Do not consider paint, engine improvements or any sort of customization.
Be a sheep. That's the safest thing to do. Don't be an individual. Think only what you are told to think. Personal liberty is to be looked upon as treason to the state.
.......
Or... just let people do what they want with things they bought. If Apple wants to insist on controlling what you can or cannot do with the device, then they shouldn't sell it in the first place, but rent or lease it instead.
People don't just jailbreak their phones to get on other GSM carriers...they do it so they can steal APPS. Yep, those 100K Apps Apple fans brag about get stolen with ease with jailbroken phones.
Boo to this hacker to posting instructions on how to fix his simple hack!
How do you figure that? The apps are only there if the developers offer them.
Freedom isn't just a word.
Boo on yourself.
T-mobile prepaid = $100 per year. AT&T cheapest plan = $720 per year.
If you want to use your iPhone...gasp...as a phone, and use its computer functionality as a kind of iPod touch, then T-mobile will save you $$$.
It's not illegal. Gen 1 iPhones are already off contract - when you upgrade to a new phone, you can sell the off contract phone off ebay...that new owner is not subsidized on that purchase, and can run the phone on any network they want (as long as it supports the tech - GSM).
, and besides the DMCA specifically grants an exception for unlocking a phone.
It's not about stealing apps, thats a tiny minority, as CNET has reported before.
You just spread a lie.
It's all legal, it's all normal.
- by networksniff November 4, 2009 4:40 AM PST
- THTA'S A GR8 THING, PORT SCANNING T MOBILE COMMUNICATION NETWORK CENTER IS REALLY GR8 STUFF.
- Like this Reply to this comment
-
Showing 1 of 2 pages (62 Comments)NEED TO GET READY FOR MOBILE SECURITY.
[CNET editors' note: URL removed]