To date, there have been a small number of iPhone viruses that put users of the popular phone at risk. For your phone to become infected with the previously known iPhone viruses, you would need to visit a malicious website with your phone or open an infected email. As of Wednesday 29 July 2009, this is not longer the case after information was released on a critical vulnerability in the iPhone at the Black Hat Security Conference in Las Vegas as reported by Elinor Mills on CNET News.
IPhone Virus Vulnerability?
Ms. Mills writes about her first-hand experience with the iPhone researchers at the Black Hat conference. She describes how they were able to take complete control over her iPhone, merely by sending special SMS Text messages to her phone. The text messages take advantage of a memory corruption problem inherent to the iPhone and several other models of web-enabled phones. The catch with the new vulnerability? You can’t prevent a malicious hacker from attacking your iPhone unless he or she just doesn’t know your phone number! A hacker can simply knock you off of the air with the attack, or take full control of your phone if you do not catch the attack when it is occurring.
Actions to Take if Your iPhone Is Attacked
It’s still too early to tell, but in Ms. Mill’s article the researchers recommended:
“Rebooting wouldn’t be a bad idea. It would stop all but the most sophisticated attacker. However, it doesn’t take but a second to grab all your personal info from the device, and as soon as you turn it back on, the bad guy could attack you again. That’s why I think this is so serious.”
Apple apparently has known about the vulnerability of the iPhone for over 6 weeks, and there is not a patch readily available yet. At this point, to me it seems you have two options depending on the sensitivity of data you access via your iPhone:
1 – Do nothing. Apple may patch this vulnerability before a script kiddie or other hacker gets hold of the “How to Hack the iPhone” and uses it on your phone…or
2 – Take action now to remove sensitive data from your iPhone before you are attacked.
Option 2 requires more work on your part, but do you really want to have your privacy attacked through a problem you can help mitigate today?
Refs:
http://news.cnet.com/8301-27080_3-10299378-245.html
http://www.examiner.com/x-14795-Page-One-Examiner~y2009m7d30-iPhone-virus
http://salaswildthoughts.blogspot.com/2009/07/new-iphone-virus-iphone-hack-released.html
