Third iPhone worm targets jailbroken iPhones in Europe, Australia

Another week, another worm hitting jailbroken iPhones. As with the previous exploits, which Rickrolled your phone’s wallpaper and stole your data, this nasty piece of work burrows its way into your jailbroken device if you haven’t changed the password for the iPhone’s root account—you have changed your root password, right? Right?

A source who’s seen the worm in the wild tells Macworld that, after compromising the phone, the worm goes on to replace the phone’s copy of the SSH remote login software, changes the root password (so you can’t stop the worm without wiping the phone), skims your SMS database, checks in with its Lithuania-based overlords via the network, and then starts running a piece of software that searches for other vulnerable phones on both the local network and known IP address ranges of specific Internet Service Providers (mostly European). Somebody should have told the worm that nobody likes overachievers.
MacWorld

New IPhone Malware Steals Data From Jailbroken Phones

Another piece of dangerous code that attacks iPhones has been found, although it puts at risk only a very small subset of the smartphone's users.

Mac security vendor Intego calls the code "iPhone/Privacy.A." It is a malicious tool hackers install on Windows, Mac, Unix or Linux systems, and even on iPhones, using those devices to scan for "jailbroken" iPhones, some of which are vulnerable to the malware.

If it finds a vulnerable iPhone within its range, the malware copies e-mail, contacts, SMS (Short Message Service) messages, calendar entries, photos, music, videos and any data recorded by an iPhone application, according to an advisory from Intego.

"This hacker tool could easily be installed, for example, on a computer on display in a retail store, which could then scan all iPhones that pass within the reach of its network," Intego said. "Or, a hacker could sit in an Internet café and let his computer scan all iPhones that come within the range of the Wi-Fi network in search of data. "

However, the tool can only attack jailbroken iPhones, or ones that have been modified to run unapproved software, that are running SSH (Secure Shell), a Unix utility with the default password enabled. PC World