Dangerous Worm Targets Jailbroken iPhones

Yet another worm has appeared that targets jailbroken iPhones and iPod touch devices, using the same default password vulnerability in SSH remote login software to crawl its way into the devices. However, unlike the two previous worms exploiting the vulnerability, this worm protets itself by replacing the vulnerable SSH software, has the capability to steal sensitive data, and can update itself via a botnet-like command-and-control architecture to add new malevolent features.

Apple-iphone-sg3

As with previous iPhone/iPod touch worms, the only devices potentially vulnerable are those that have been “jailbroken” to use unapproved applications or to operate on mobile carriers other than Apple’s selected iPhone partners. The worm exploits a vulnerability in the default rool password used for the SSH remote login software; users who have jailbroken their devices can protect themselves by changing their default SSH root passwords. Users who have not jailbroken their devices are not vulnerable.

According to security firm Sophos,the new worm uses an architecture like a typical PC botnet, enabling the worm’s creators to gather data and send updates to infected devices. The worm “configures two startup scripts, one to execute the worm on boot-up, and the other to create a connection to a Lithuanian server (HTTP) to upload stolen data and cede control to the bot master.” The worm assigns each infected device a unique ID number, potentially enabling the worm’s creators to target compromised devices individually.

The worm also changes the default root password on the iPhone or iPod touch, making it impossible for users to retake control of their devices without reinstalling Apple’s default firmware. The worm currently targets IP ranges belonging to Dutch and Australian ISPs, as well as T-Mobile. One impact of the worm is that it seriously depletes battery life in infected devices because the worm produces so much network traffic. The worm may also be related to so-called Banker Trojans: it appears to look for two-factor authentication requests from banking systems that send one-time passwords to mobile users via SMS.

Mobile

Firefox Send file-sharing service is now an Android app

Mozilla has just launched Firefox Send as an Android app. The free service lets you share files of up 2.5GB via a web link that expires after a certain period of time or number of downloads.
Mobile

24 must-have apps for rooted Android phones and tablets

Rooting your Android device opens up a world of possibilities, along with a few apps. Here are 24 of our favorites, so you can make the most of your rooted device and unleash the true power of Android.
Deals

Looking to upgrade? These are the best iPhone deals for March 2019

Apple devices can get expensive, but if you just can't live without iOS, don't despair: We've curated an up-to-date list of all of the absolute best iPhone deals available for March 2019.
Mobile

Rooting your Android device is risky. Do it right with our handy guide

Wondering whether to root your Android smartphone or stick with stock Android? Perhaps you’ve decided to do it and you just need to know how? Here, you'll find an explanation and a quick guide on how to root Android devices.
Movies & TV

Apple’s next big event is set for March 25: Here’s what you can expect

Apple's next big event takes place on March 25 in Cupertino, California. The company is expected to make several announcements related to its services, including Apple TV, so follow our guide to get ready for the big event.
Mobile

Got gadgets galore? Keep them charged up with the 10 best USB-C cables

We're glad to see that USB-C is quickly becoming the norm. That's why we've rounded up some of the better USB-C cables on the market, whether you're looking to charge or sync your smartphone. We've got USB-C to USB-C and USB-C to USB-A.
Product Review

The new iPad Mini isn’t a beauty, but it performs like a beast

Apple’s new iPad Mini has beastly performance, fluid iOS 12 software, and good battery life. It also looks like it came straight out of 2015, because the design hasn’t been changed. Here's our review of Apple’s 7.9-inch tablet.
Mobile

5G's arrival is transforming tech. Here's everything you need to know to keep up

It has been years in the making, but 5G is finally becoming a reality. While 5G coverage is still extremely limited, expect to see it expand in 2019. Not sure what 5G even is? Here's everything you need to know.
Mobile

This is the easiest way to save your iPhone data to your computer

Living in fear of losing your contacts, photos, messages, and notes on your iPhone? Fear no more -- in this guide, we'll break down exactly how to back up your iPhone to your computer using Apple's iTunes or to the cloud with iCloud.
Mobile

Here are the best iPad Pro keyboard cases to pick up with your new tablet

The iPad Pro range can double as laptops, but they do need proper keyboards to fill in effectively. Thankfully, there are loads to choose from and we rounded up the best iPad Pro keyboard cases right here.
Movies & TV

Here are all the TV shows and movies we expect to see at Apple’s March 25 event

Apple has an ambitious slate of original programming it has been developing in recent years, so will the March 25 event finally reveal when — and where — we will be able to see some of these TV shows and movies?
Mobile

Wring the most out of iOS with the best commands for Siri

You may not know all the things you can say to Siri -- after all, Apple never released an official list of commands for its virtual assistant. Thankfully, we've compiled a list of the best Siri commands to help you out.
Computing

Stop dragging windows on your Mac. Here's how to use Split View to multitask

The latest iterations of MacOS offer a native Split View feature that can automatically divide screen space between two applications. Here's how to use Split View on a Mac, adjust it as needed, and how it can help out.
Mobile

Flex your thumbs (and your brain) with these fun texting games

Gaming consoles keep getting more advanced, but you can still have fun with the good old Latin alphabet. Here are our picks for the best texting games, so you can make the most fun out of that limited data plan or basic cell phone.