I know of at least one geocaching/wifi exploit to achieve non-GPS locating; a virus using that plus having some use for the phone's location would certainly scare enough people to start a small crisis.