First Trojan for iPhone discovered in the wild

By Ed Oswald | Published January 9, 2008, 12:04 PM

F-Secure said that it had uncovered the first Trojan horse for the iPhone, which seems to erase user's files in their /bin directory.

Standard iPhone users have nothing to worry about. However, those who have opened up their phones (both locked and unlocked) to install third-party applications are at risk for the exploit.

According to the security firm, the Trojan masks itself as an update to 'Erica's Utilities' and is titled '113prep,' in apparent reference to the upcoming firmware update. Once installed, it does nothing more than display the word 'shoes,' but behind the scenes it is busy deleting all files in the users /bin directory.

This action will break legitimate applications and essentially brick the iPhone. It is not clear if a system restore would be able to reverse the damage done. Additionally, with modifications done to the phone, that would mean taking the phone to the Genius Bar would not be an option either: Apple is refusing to fix modified phones.

Likely anyone who is to have been affected has already been: After the application was discovered by Modmyiphone.com, the site was taken offline. According to F-Secure, the application was created by a 11-year-old developer who was tinkering with XML code.

"Next time it might be someone else with more skills and with specific target," Jarno wrote on the F-Secure blog. "Hopefully this serves as a warning for those who have opened their iPhones using a security hole in the system and then installing unverified software without a second thought to what they are doing."

Comments

View comments by with a score of at least

Hacked iPhone? It's a lie. We all know that OS X is bullet proof. How could it get hacked in the first place?

Score: 0

|

So only illegally unlocked iPhones can be affected by this? And all the Apple Haters/M$ drones act like the iPhone is somehow insecure? LOL.

Score: 0

|

F-Secure is a bunch of liers.. There will never be a virus for the iPhone.. Steve Jobs would never let this happen.. He shoudl sue them

Score: 0

|

agreed....apple says it is perfect and not prone to anything everything else is. All claims for such things are lies...hehe

Score: 0

|

gosh ... Apple gets some market share and becomes a viable target, imagine that.

Score: 0

|

Impossible. Doesn't the iPhone run a modified version of OS X? It's totally immune to malware. The Apple zealots told me so!

Score: 0

|

Obviously not.

Score: 0

|

"the application was created by a 11-year-old developer who was tinkering with XML code."

Give the kid a job.

Score: 0

|

Imagine how fragile it is, given what someone, oh... 22 could do. Script-kiddies just got excited...

Score: 0

|

hacked iphones are vulnerable? no way!

Score: 0

|

Early adopters knew what they were getting into, they can always buy another.

Score: 0

|

Score: 0

|

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.