'Stagefright' vulnerability compromises Android phones

M

mak2000

Expert Member
Joined
Apr 13, 2005
Messages
1,647
Reaction score
195
Remember the IOS bug when someone send you a particular message and it crashed your iphone or ipad. This seems far worse for android users as it can be used to execute code without any interaction from the users. 95% of Andriod devices affected by this.

Experts Found a Unicorn in the Heart of Android

Attackers only need your mobile number, using which they can remotely execute code via a specially crafted media file delivered via MMS. A fully weaponized successful attack could even delete the message before you see it. You will only see the notification. These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited. Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual – with a trojaned phone. - See more at: http://blog.zimperium.com/experts-found-a-unicorn-in-the-heart-of-android/#sthash.YlTRj3N5.dpuf
Click to expand...
 
Last edited:
Another Android exploit that only non-Android users will bitch & moan about and nobody will take advantage of.

Roll on the Android haters who will no doubt use this to try justify their OS/phone/tablet of choice...
 
For me to turn off MMS on LG G3S 4.4.2 (I have actually never received an MMS on my phone, lol):
SMS/Messaging app > the | button top right (it is divided into three) > Settings > Multimedia message > Auto-retrieve change to off.
I unticked everything there as well, as I do not ever receive multimedia messages.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X