The first iPhone Trojan has been seen in the wild, according to security vendors.

The first warnings about the Trojan were posted on the iPhone modification forum ModMyiFone.com, said security vendor F-Secure. When installed, the Trojan appeared to do nothing more than display the word “shoes”, according to the ModMyiFone post.

However, when a user attempted to uninstall the malicious code, the application wiped files from the /bin directory, breaking ‘Erica’s Utilities’ such as sendfile. Erica’s Utilities are a collection of command-line utilities for the iPhone, according to security vendor Symantec, which warned that the Trojan also overwrites OpenSSH, an open-source encryption protocol.

Read more: silicon.com