Own an Android phone? Beware, Your Android smartphones can be hacked by just a malformed text

Discussion in 'Technical' started by stg58, Jul 29, 2015.

  1. stg58

    stg58 Monkey+++ Founding Member

    Edit: Just saw this demonstrated and they turned on the cameras without the owner of the phone shown any alerts.:(

    Own an Android phone?
    Beware, Your Android smartphones can be hacked by just a malformed text message.
    Security researchers have found that 95% of Android devices running version 2.2 to 5.1 of operating system, which includes Lollipop and KitKat, are vulnerable to a security bug, affecting more than 950 Million Android smartphones and tablets.
    Almost all Android smart devices available today are open to attack that could allow hackers to access the vulnerable device without the owners being aware of it, according to Joshua Drake, vice president of platform research and exploitation at security firm Zimperium.

    Simple Text Message to Hack Any Android Phone Remotely

    The vulnerability actually resides in a core Android component called "Stagefright," a multimedia playback library used by Android to process, record and play multimedia files such as PDFs.
    A Text Message Received...Your Game is Over
    The sad news for most of the Android users is that the fix will not help Millions of Android users that owned older versions of the operating system that Google no longer supports, opening doors for hackers to perform Stagefright attack.
    Drake has developed and published a scary exploit that uses a specially crafted text message using the multimedia message (MMS) format.
    All a hacker needs is the phone number of the victim’s Android device. The hacker could then sends the malicious message that will surreptitiously execute malicious code on the vulnerable device with no end user action, no indication, nothing required.
    Last edited: Jul 29, 2015
    Marck likes this.
  2. sec_monkey

    sec_monkey SM Security Administrator

    iPhones and all apple devices are vulnerable to a security bug along the same lines.
    Ganado likes this.
  3. Yard Dart

    Yard Dart Vigilant Monkey Moderator

    None of our electronic devices are safe and you should operate as such...... with enough money, talent and time....anything can be cracked if they choose to do so. Many of the carriers and manufactures have built in back doors to your devices for the letter boys to exploit at will.... life in a police state.... oh the joy. :cautious:
    sec_monkey likes this.
survivalmonkey SSL seal        survivalmonkey.com warrant canary