on 28-07-2015 15:45
"A critical vulnerability at the heart of Android can open up 95 percent of all smartphones on that platform to devastating hacks with a single text message. Known as 'Stagefright' the hack is able to execute remote code on an Android phone with no more information required than a phone number. Described as one of the "worst Android vulnerabilities discovered to date", and discovered by Zimperium zLabs vice president of platform research and exploitation Joshua J. Drake, the Stagefright code would theoretically be able to attack a device and delete the message before a user could even see it."
http://www.wired.co.uk/news/archive/2015-07/27/stagefight-android-bug
So simple getting a MMS message is enough to trigger the malware. Probably be months if at all before the networks release the update to fix it. Have the networks even released the Samsung keyboard exploit fix yet?
on 28-07-2015 15:46
on 28-07-2015 15:47
on 28-07-2015 15:47
Turning off "Automatically retrieve MMS" in message settings should help until the update arrives.
on 28-07-2015 15:49
on 28-07-2015 15:49
on 28-07-2015 15:52
on 28-07-2015 15:52
@perksie wrote:Turning off "Automatically retrieve MMS" in message settings should help until the update arrives.
Doubt anyone wanting to exploit it would use MMS as it would cost them to send thousands of the messages out. This exploit can be used on any messaging app that accepts pictures/video so something like Hangouts and Facebook Messenger would be easier targets as they're free to send