Help us help you
Summary: Cisco Talos reported two iPhone worms in a single month, both exploiting jailbroken phones where users installed SSH but left the default password unchanged. One worm rickrolled jailbroken iPhones in Austria and Australia, while the second redirected ING bank customers in the Netherlands to a phishing site; as of August 2009, an estimated 1.1 million of the 13 million US iPhones were jailbroken.
Key Takeaway: The foothold in both worms was a default SSH password on jailbroken devices - 1.1 million phones in the US alone fit that profile, and a script kiddie with a simple hack was enough to redirect bank customers to a phishing site.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026