Security Vulnerability on Jailbroken iPhone

Many of us have jailbroken our iPhones, and if you have made the mistake of not changeing the default root password are vulnerable to the simple intrusion method that can be used to hold iPhones hostage, just like this guy from the Netherlands.

This guy didn’t inflict any serious harm and only demanded a small optional payment, and limited his activity to the Netherlands. Whoever learns from his approach might not be as nice. so if you have a jailbroken device please Change your root passwords or disable SSH.

The Hackers Message :
“If you don’t pay, it’s fine by me, but remember, the way I got access to your iPhone can be used by thousands of others-they can send text messages from your number (like I did), use it to call or record your calls, and actually whatever they want, even use it for their hacking activities! I can assure you, I have no intention of harming you or whatever, but, some hackers do! It’s just my advice to secure your phone.“

To Change the default Root Password on the iPhone :

1. Get an SSH program like putty for windows.
2. SSH to your iPhone.
3. Again in putty or any ssh client type: “passwd”. You’ll then be asked for a new password, you can change this into anything you want.

via theiphoneblog

One Response to “Security Vulnerability on Jailbroken iPhone”

1. Security Vulnerability on Jailbroken iPhone in Australia | Apple iPhone 3GS apps, features and news says:

   November 9, 2009 at 7:37 pm

   [...] few days ago we saw how a hacker in Netherlands took advantage of the Security Vulnerability on Jailbroken iPhone. If you have made the mistake of not changing the default root password you [...]

   Reply