November 3rd, 2009 by Arjan Olsder Posted in Platforms: iOS | No Comments »
This week has become very interesting for the jailbreak community. A Dutch hacker managed to get into the iPhone and even got control over consumers’ iTunes accounts.
Last Monday, the 17-year old hacker PureInfinity92 announced that he managed to take over iPhones via a simple SSH leak. He polled T-Mobile NL IP addresses to find out if Jailbreaked iPhones would respond and then tested if OpenSSH was installed. If so, he used the default SSH user/password combination. It turned out that a lot of consumers didn’t change these.
As a result, he took control over the devices and put a message on the screen that a certain website needed to be visited in order to remove it. Though he wanted to charge money for the unlock at first, he is now giving the information for free.
iPhone hacker McFliatn explored the SSH issue and reported that he could get hold of the iTunes account of the persons that were hacked. Since that account is directly linked to the Click ‘n Buy functionality, it means hackers can start spending the money of their subjects. He noticed that the info is easy to aggregate with a bot and hopes T-Mobile will take counter measures to defend its clients. Closing port 22 will already make it a whole lot harder for Hackers to get on the devices.
