No Regrets From Aussie IPhone Virus Creator

The Australian programmer who claims to have created the world’s first Apple iPhone virus as a prank, has told Computerworld he does not regret writing it.

By Kathryn Edwards
Mon, November 09, 2009

Computerworld Australia — The Australian programmer who claims to have created the world's first Apple iPhone virus as a prank has told Computerworldhe does not regret writing it.

First IPhone Worm Spreads Rick Astley Wallpaper

The worm, 'Ikee' changes iPhone owners' wallpaper and replaces it with a photo of '80s pop star Rick Astley and the message "ikee is never going to give you up".

Twenty-one-year-old Wollongong resident Ashley Towns, said he created the virus out of curiosity and boredom.

"I had just formatted my iPhone and it told me to set the password in bold, big letters and I wondered how many people have actually done that," Towns said.

"So I ran a scan on my [Optus] 3G network and there was 26 phones running the service that's vulnerable, and out of that 26, 25 hadn't changed their passwords."

Towns said he loves the iPhone so there was no vendetta against Apple, just disbelief that many users had failed to change their passwords when requested to do so.

"It's the simplest thing to change your password, it's not hard and if you're going to install something like SSH...I could have gone through and read people's messages and emails -- all their barter was up for grabs," Towns said.

Although Ikee does not appear malicious, it has the potential to be modified and perform tasks such as stealing sensitive information from iPhone users. The worm can affect jailbroken iPhones running a Unix utility called SSH (Secure Shell) with the iPhone's default password, "alpine," still in use.

Once in place, the worm appears to attempt to find other iPhones on the mobile phone network that are similarly vulnerable, and installs itself again.

Towns admitted he was targeting phones on both Telstra and Vodafone, as well as Optus, however he soon discovered that Telstra and Vodafone are behind NAC firewalls, making their SSH inaccessible.

However, he said the worm can spread between phones on the same Wi-Fi network.

Despite admitting the virus was a form of vandalism, Towns said he stands by his decision to release the worm.

"All the worm does is change your background to Rick Astley, so it's not malicious, it's not going to harm anyone's phone other than people having to look at Rick Astley until they remove it," Towns said.

Although so far confined to Australia, Towns said the virus has the potential to spread globally and claimed to have read reports the virus turned up in China

Australian iPhone users have reported their experience with the worm, flooding Internet forum Whirlpool with posts about their experience.

Security vendor Sophos reports that at least four variants of the worm code have been written so far, with one variant trying to hide its presence by using a filepath suggestive of the Cydia application.

What's your RickRolling experience? Found a fix to Rick? Email Computerworld or follow @computerworldau on Twitter.

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.
This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.
Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.
This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.
Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.
3 minute Flash video - overview of the need for and value of Configuration Control.
Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Sponsored Links
Resource Center