StageFright

[The_Unbeliever]

So... how exactly does one get to access any kind of Android phone after getting the initial stagefright MMS through, and the device accepted it?

I would assume some kind of front-end in which you type the cellphone number in, it generates the nasty MMS payload, send it off, and check for activation on the remote device - and once it's activated, let you know so that you can do your nefarious business on the unsuspecting owner...

 

[Kloofvreter]

Interesting. I recall a piece of software called BackOrifice years back with which you could access the other person's PC, but that person still had to run the executable, and you have to trick them into doing it in some way. Years later it became known as malware.

I wonder how this one works, though.

 

[The_Unbeliever]

Interesting. I recall a piece of software called BackOrifice years back with which you could access the other person's PC, but that person still had to run the executable, and you have to trick them into doing it in some way. Years later it became known as malware.

I wonder how this one works, though.

Exactly why I'm asking. The media made a big hoo-haa about this, but now I'm wondering, just what exactly do you need to gain control over said device. You already gain remote access. Now what is the next step in this process?

edit : I'm not interested in hacking somebody else's phone, I'm just interested in finding out how it works, and what you need for it to be successful.



*subscribed*