- Jul 28, 2017
- 185
I notice not many people have a USSD protection app. Are USSD exploits still a concern? Should I be using an app to protect against it?
Are USSD exploits still a concern?
- Thread starter LukeLovesSecurity
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
USSD Exploit Test
Check if your device is vulnerable but only if USSD is supported. If it is vulnerable then it'd be in your interest to take precaution to help mitigate such attacks, and there are apps on Google Play from vendors like Bitdefender which are supposed to tackle USSD exploitation. However, I doubt such attacks are prevalent anymore because these exploitation mitigation applications have not been updated for years.
You can also keep your Android device up-to-date with the latest updates to help keep it more secure, patching old and known but patched vulnerabilities, making you a harder target in general.
Check if your device is vulnerable but only if USSD is supported. If it is vulnerable then it'd be in your interest to take precaution to help mitigate such attacks, and there are apps on Google Play from vendors like Bitdefender which are supposed to tackle USSD exploitation. However, I doubt such attacks are prevalent anymore because these exploitation mitigation applications have not been updated for years.
You can also keep your Android device up-to-date with the latest updates to help keep it more secure, patching old and known but patched vulnerabilities, making you a harder target in general.
The vulnerability lies more in general Android (fortunately, not all phones) and has been definitively fixed by Google with Jelly Bean:
Log - android-4.1.1_r1 - platform/packages/apps/Contacts - Git at Google
Theoretically you could be at risk using an old Android version, but I think criminals have lost interest in taking advantage of USSD and looking for something more interesting and rewarding but yes @Opcode said good tips about that.
Log - android-4.1.1_r1 - platform/packages/apps/Contacts - Git at Google
Theoretically you could be at risk using an old Android version, but I think criminals have lost interest in taking advantage of USSD and looking for something more interesting and rewarding but yes @Opcode said good tips about that.
Similar threads
