Hack Any Android Phone Using Simple Text Message

Own an Android phone? Beware, Your Android smartphones can be hacked by just a malformed text message.
Security researchers have found that 95% of Android devices running version 2.2 to 5.1 of operating system, which includes Lollipop and KitKat, are vulnerable to a security bug, affecting more than 950 Million Android smartphones and tablets.

Almost all Android smart devices available today are open to attack that could allow hackers to access the vulnerable device without the owners being aware of it,
                                                                                            - Joshua Drake,Zimperium.

The vulnerability actually resides in a core Android component called "Stagefright," a multimedia playback library used by Android to process, record and play multimedia files such as PDFs.

A Text Message Received...Your Game is Over

The sad news for most of the Android users is that the fix will not help Millions of Android users that owned older versions of the operating system that Google no longer supports, opening doors for hackers to perform Stagefright attack.
Drake has developed and published a scary exploit that uses a specially crafted text message using the multimedia message (MMS) format.
All a hacker needs is the phone number of the victim’s Android device. The hacker could then sends the malicious message that will surreptitiously execute malicious code on the vulnerable device with no end user action, no indication, nothing required.
"These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited," 

Stagefright: Scary Code in the Heart of Android

"Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised, and you will continue your day as usual—with a trojaned phone."

The same vulnerability can also be exploited using other attack techniques, such as luring victims to malicious websites.

Drake will present his full findings, including six additional attack techniques to exploit the vulnerability, at Black Hat security conference in Las Vegas on on August 5 and DEF CON 23 on August 7, where he is scheduled to deliver a talk titled, Stagefright: Scary Code in the Heart of Android.

Almost all Android devices containing Stagefright are in question. According to Drake, all versions of Android devices after and including version 2.2 of the operating system are potentially vulnerable, and it is up to each device manufacturer to patch the devices against Stagefright attack.

When will I expect a Fix?

Google has patched the code and sent it to device manufacturers, but devices require over-the-air updates from companies such as Samsung or Motorola to update their customers' phones.
Given the shaky history of handset manufacturers and carriers rolling out security patches, it is not known how long the companies will take to update vulnerable Android devices against Stagefright attack.
However, Silent Circle has patched the issue in its Blackphone, as has Mozilla, which uses Stagefright code in Firefox OS.

Comments

  1. one of the best hackers i can vouch for is Genius Hack and you can contact him via geniushack08@gmail.com for any form of hacking services...i strongly recommend this guys for you hacking tasks,just inquire and your problem is solved;email hack,social media hack,instant messages hack,credit card hack,school grade changes,database and server hack...

    ReplyDelete
  2. This is just so true! He is damn skillful! Thanks to you buddy! Shout out to geniushack08@gmail.com
    Thanks for being honest and truthful with your works.

    ReplyDelete

Post a Comment