Skip to main content

Technology bits: Samsung Galaxy Phones Are Vulnerable To A Remote Wipe Attack


A SECURITY RESEARCHER has exposed vulnerability in some Samsung handsets that leaves them open to a remote wipe attack.


Ravi Borgaonkar showed off the attack at the Ekoparty security conference, reports Slashgear. There he showed how a hacker could direct the user to a webpage where some malicious code could plunge them into a factory reset nightmare.

Borgaonkar's talk, Dirty use of USSD Codes in Cellular Network, showed how the Unstructured Supplementary Service Data (USSD) protocol, which is commonly used, can be exploited by attackers.

The attack can rely on people following links that suggest a trip to a website where you might see a "sexy co-ed" or equivalent. But as we have seen time and time before, people will fall for this type of thing. QR codes can also send people to attack webpages, according to Borgaonkar, as can NFC tags. Basically, anything that can open a URL can be used, he explained.



He said that attackers can kill a SIM card and wipe the handset in just three minutes, adding that although victims can see what is happening they will be powerless to stop it.


Samsung devices running Touchwiz appear to be affected. We have asked Samsung to comment. In the meantime, and unless you want to be targeted by gits, you might consider turning off automatic page loading in your NFC and QR code reading apps.


Update
Samsung assured that the vulnerability had been fixed already, but did recommend that users install the latest software update.

Comments

Popular posts from this blog

Wellcome Back. Yeh!!!

Happy new year 2018 to all my esteemed followers. I am so excited to be back with a bang as i will be dishing out informative and educative gist in the coming weeks from local to international. It promises to be fun. Please stay hooked to my blog for a well researched information on Information Technology, Travels and Tourism, Education, Shopping and Entertainment. Keep the comments coming. It's going to be a fun ride.....! TC

Food for thought!

Start where you are. Use what you have. Do what you can."-- don't wait for all the resources to start before you start, whatever your hands find to do, do it with all thy might. Rome was not built in a day & the journey of a life time starts with a step. Start small dream big. Have a good week. Capo de CONSTANT el Asabia

HINTS TO A SUCCESSFUL CAREER AS AN AUDITOR; A PRATICAL APPROACH

Discussing the pathway to a successful career as an auditor will be inconclusive without explaining what an audit is and the duty of an auditor. An audit is an independent review of the financial statement of an entity to ascertain its accuracy, to ensure efficiency and effectiveness while an auditor carries out the function of an audit by giving a true and a fair view on findings. Audit involves frequent checks and review of all financial operation of an organization. However, audit goes beyond examining just the financial transaction of an organization. An in-depth audit incorporates examining business decisions, human resource management, staff welfare and motivation, operational policies, etc., which are managed by proper internal controls that should be reviewed from time to time. In view of the fact that an auditor must form an independent opinion on his findings, it is necessary that the following must be taken into consideration in the discharge of his duties to be a s...