Feeds

Extortionist targets jailbroken iPhones

But then relents and offers free fix

The Power of One Infographic

A Dutch hacker who threatened iPhone jailbreakers has relented on their threat to abuse unlocked handsets unless users pay €5.

Some Dutch users of jailbroken iPhones got a shock when greeted with a message from a Dutch hacker claiming to have complete control of their beloved handset. The miscreant threatened to use that control to steal data and send messages, unless the user coughed up €5 to a PayPal account to receive instructions for removal of the back door.

iPhone Hack

Not what one would want to see: image lifted from Tweakers.net

The hack was possible because jailbreaking an iPhone involves enabling an SSH (Secure Shell) service on the handset, and users who then failed to change the default password left their device open to anyone with a modicum of technical knowledge and time on their hands.

Our hacker did some port scanning and then tried the default password on those devices which still had SSH running. SSH can be shut down once an iPhone is jailbroken, but many iPhone users lack the technical expertise to do that, however, or do not understand there is a risk involved in failing to do so.

But on this occasion common sense prevailed, and the hacker has posted instructions on how to remove the security hole, so revealing themselves to be more of an opportunist than a hardened criminal.

It is a useful reminder for iPhone users though, and everyone else - never leave the default password unchanged, on anything, ever. ®

The Power of One eBook: Top reasons to choose HP BladeSystem

More from The Register

next story
GoTenna: How does this 'magic' work?
An ideal product if you believe the Earth is flat
Google Nest, ARM, Samsung pull out Thread to strangle ZigBee
But there's a flaw in Google's IP-based IoT system
Orange spent weekend spamming customers with TXTs
Zero, not infinity, is the Magic Number customers want
US freemium mobile network eyes up Europe
FreedomPop touts 'free' calls, texts and data
Want to beat Verizon's slow Netflix? Get a VPN
Exec finds stream speed climbs when smuggled out
'Two-speed internet' storm turns FCC.gov into zero-speed website
Deadline for comments on net neutrality shake-up extended to Friday
NBN Co execs: No FTTN product until 2015
Faster? Not yet. Cheaper? No data
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.