iPhone Trojan Sign of Things to Come?

Just days after the first scareware for OSX, researchers are pondering the problems of an iPhone exploit that could lead to larger issues. The Trojan pulls legitimate apps off the phone if you try to remove it, but it only infects iPhones that have 'been modified or opened through a security hole in the system.' Though this worm is more of an annoyance than anything else, it could be a proof of concept for a more serious attack.

The fear is hackers may be experimenting and gathering research that will increase the dangers of a more malicious attack in the near future. It is clear at least one writer -- the author of this piece at Web Worker Daily -- thinks that the iPhone should be left on the dresser in the morning. She offers several reasons that the device isn't a good corporate tool.

News source: /.

Report a problem with article
Previous Story

Mac Users More Open Minded And Sure Of Themselves - Study

Next Story

Hold test

24 Comments

Commenting is disabled on this article.

Seeing as it only affects the jailbroken version of the iphone... isn't it possible Apple has created this to discourage hacked phones?... After all the hacked phone affects their business model, not to mention they'd get a nice profit from you all having to go buy new ones.

.kvn said,
Way to go Neowin, old news.

Didn't you get the memo? its bash Apple week, along in a few hours is a regurgitation of that porn download application thats pretending to be a codec

evo_spook said,

Didn't you get the memo? its bash Apple week, along in a few hours is a regurgitation of that porn download application thats pretending to be a codec

And a lot of the bashing is just old news as well. Remember that comment about the one button mouse yesterday? Welcome to 2008 :).

This was posted like two weeks ago on many tech news sites then found to be a badly written program written by a 14 year old. The only reason it uninstall other apps is that the uninstaller was copied from those other apps...

Okay, so some guy goes and Jailbreaks/Hacks his iPhone, therefore making it vulnerable to attacks (especially if SSH is installed with default password)

My point is, how the hell does that make the iPhone a 'bad corporate tool'?! If people wanna go and hack their phones, they should expect reduced/no security from things like this. We're talking here of an "application" in the installer.app that the user must choose to install themselves.

Most Smartphones can be 'hacked' or similar, and the story would be exactly the same in terms of security.

This story seems to be taken completely out of context...

The reason why this is still a fair warning (and should be heard more often) is because unlike majority of smartphones, Apple designed iPhone with a 90's security model in mind. Everything runs as root. The equivalent to Windows 95, where everything ran as Admin.

There is going to be a price to pay for this, unless they manage to patch this but I am not sure they can make such sweeping architectural changes in a patch.

We will of course see. However, iPhone has sold in numbers great enough for it to become a target. Coupled with the above security model, it is too tempting. Saying that "every other phone can be hacked" does not make that different.

BigBoy said,
The reason why this is still a fair warning (and should be heard more often) is because unlike majority of smartphones, Apple designed iPhone with a 90's security model in mind. Everything runs as root. The equivalent to Windows 95, where everything ran as Admin.

I suspect this will change when the SDK is release. It would be an even more colossal mistake if it didn't.

So, again this only effects those devises which were jailbreaked?.. In this case Apple can't do anything, if people want to risk - they can do it on their own will.

Please - how is this any different than my E90? It can carry trojans, it can contain malware and it can be compromised just as easily as an IPhone.

Friggin' "security researchers" should be kicked in the face. Fear mongering idiots.

daPhoenix said,
Please - how is this any different than my E90? It can carry trojans, it can contain malware and it can be compromised just as easily as an IPhone.

Friggin' "security researchers" should be kicked in the face. Fear mongering idiots.

The big reason is that the iPhone runs OSX... almost the exact same OSX as the Mac does, just stripped down... if it can happen there it may have an effect on your desktop also... to contrast this Windows Moble is not a stripped down version of XP / Vista... its actually a completely different OS and works differently... then Symbian phones do not get the same viruses as windows... so basically its showing that OSX could potentially get viruses....

Except it's not news that OSX/BSD/Linux/HUPX/AIX can all be hit by a trojan (which is just a file that is thought to be benign - usually by deceptive names or documentation - but contains a malicious payload).

A file claiming to be a free ringtone/game/whatever can contain a rm -rf /. Et Voila! A trojan on unix.