OSNN Senior Addict
- 12 Dec 2008
LAS VEGAS--Researchers have discovered a way to take complete control over an iPhone merely by sending special SMS messages and demonstrated it on my iPhone at the Black Hat security conference on Wednesday.
Although an attacker could exploit the hole to make calls, steal data, send text messages, and do basically anything that I can do with my iPhone, the researchers were kind and merely rendered it temporarily inoperable.
Here's what happened: While I was talking on the phone to Charlie Miller, his partner, Collin Mulliner, sent me a text message from his phone. One minute I'm talking to Miller and the next minute my phone is dead, and this time it's not AT&T's fault. After a few seconds it came back to life, but I was not able to make or receive calls until I rebooted.
Android was affected by this vulnerability as well, but Google fixed it. Apple hasn't fixed it yet. For this exploit to work the hacker only needs to know the phone # of it's victim, no files need to be downloaded! Once the hacker attacks an iPhone the hacker can also take over other iPhone's from the address book. It'll be interesting to see whether or not Apple will release an update to fix these issues. According to the article Apple was notified about it 6 weeks ago but they didn't do anything about it.