Iphone Worm Fix : Changing Your Default SSH Password in Jailbroken Iphones
I got worried about catching the new Worm that hacks into Jailbroken Iphones. This is because the default root SSH password is "Alpine" and allows hackers to install malicious programs. Anyway here is how to do it, I've done it already! So here is an easy guide to secure your Iphone and keep those nasty viruses and worm infestations out.
“What's clear is that if you have jailbroken your iPhone or iPod Touch, and installed SSH, then you must always change your root user password to something different than the default, 'alpine'. "
The following guide assumes that you have a jailbroken iPhone with OpenSSH installed.
You need to change your MOBILE PASSWORD and ROOT PASSWORD as folows :
Change your Mobile Password
Step 1: Go to Cydia and search for MobileTerminal app and then install it on your iPhone. Once you have successfully installed MobileTerminal, Reboot your iPhone.
Step 2: Now start MobileTerminal app and type the following command:
Step 3: You’ll now be asked for your old password which should be ‘alpine’ (without the quotes), followed by a new one of your choice (twice). Simply enter your old and new password and you are done!
This will change your mobile password only.
Change your Root Password:
Step 1 : type ‘login’ command (without quotes) and then press enter.
Step 2 : Now type ‘root’ (without quotes) as your login and ‘alpine’ as your current root password.
Step 3 : Once you have logged in as root, type ‘passwd’ command (without quotes) again and press enter. It will now prompt you to enter a new password (twice).
Step 4 : Simply enter your desired new password again as you did in Step 3 (for changing mobile password) and you should be all fine.
It is highly recommended that you change, both your mobile and root passwords to make sure you are completely safe from any outside SSH attack.
Source : Redmond Pie