While it’s only affecting users who happen to be ING Bank customers in the Netherlands who have a jail-broken iPhone with SSH installed, it’s clearly the vanguard of a growing problem.
F-Secure discovered the worm, which behaves like a botnet and can spread through shared Wi-Fi networks, exploiting the default SSH password “alpine”. The worm opens a page which appears to be an ING login page, aimed at capturing user name and password information.
The first worm, called Ikee, changed users backgrounds to a picture of Rick Astlee and the caption “ikee is never going to give you up”.


