Just a couple of days ago, we warned you about a worm which turned into a mobile botnet, infecting thousands of jailbroken iPhone users worldwide. According to the latest report posted by Mashable, this malicious worm in question has now been identified by the name of Ikee.B or Duh virus, and it is of the same variant as the original Ikee virus which was created by an Aussie. The only difference here is that Ikee.B is far more dangerous like iPhone/Privacy.A virus, and it is spreading rapidly, infecting thousands of jailbroken iPhone users in Australia, Netherlands, Hungary, Portugal, Brazil and other countries.
This worm, like all others attacks iPhone and iPod touch users who have jailbroken their device and have SSH enabled with default username/password combination. It gives a hacker complete access on the victim’s iPhone. The hacker can access and copy any user data from the jailbroken device, including emails, contacts, calendars, photos, SMSs, videos, in fact any data the hacker wants. It then initiates a search for other vulnerable iPhone’s on the same network to spread itself further. This process goes on and on.
If you have a jailbroken iPhone or iPod touch, with SSH enabled on default username/password, we highly recommend you to act now and change the username/password of SSH mobile and root to something other than the default ‘alpine’. Follow our complete step by step guide posted here on how-to change your SSH password on your jailbroken iPhone. Those of you who have disabled SSH are not effected by this worm.