Is Your Phone Vulnerable To The USSD Wipe Bug? Here’s A Fix

We reported on a USSD wipe bug in Samsung devices, and it was later discovered to effect a lot more than just Samsungs. If there is some code in a site, it can initiate a remote wipe of your device without any confirmation. Very malicious and absolutely horrible if it were to happen to you. However, there is a fix.

Bitdefender USSD Wipe Stopper will intercept any code that tries to run in your dialer, warning you. That’s all you need, a warning. We suggest not letting any site ever accessing your dialer. Grab the app from the source link, and we hope this helps all of you with affected devices!

Play Store: Bitdefender USSD Wipe Stopper

Tags: , , , , , , ,

Post comment as twitter logo facebook logo
Sort: Newest | Oldest
kanoneyez 71 pts

Fix works as described. I installed and launched it. (Samsung i997)

RaduTanasescu 32 pts

You mean to say there is a code for Android devices which you can simply dial that wipes your device without the need for a password or confirmation?

 

Whoever programmed that in is really stupid.

 

And you also mean to tell me that websites can dial numbers out of the blue? Potentially dialing a foreign number that would potentially inflate my phone bill? Is this possible on IOS?

kanoneyez 71 pts

 RaduTanasescu while I agree it is very hazardous, it is not stupid. Codes of that sort were intentionally developed to help quickly reset a device. Such an action can be very helpful when it is time to sell your phone. While the carriers would probably know of this so that they can ensure their customers' private information isn't accidentally retained (a problem in the past) so that the next owner has the potential of causing harm of one sort or another, they wouldn't be handing this out to consumers. It is also helpful when all other attempts at technical support to resolve an issue are unsuccessful. That is a smart & good thing--when it is needed.

 

That malware developers have exploited this backdoor is what makes it dangerous. When I provided technical support for PC users in a large corporation, we had a piece of software that permitted us to  stealthily remote control any device on the network without the user's knowledge. It saved hours of on-site support and travel. Was it stupid that such software existed, no. But the potential for harm was definitely there. I got involved in a very sensitive legal issue with one user when porn was found on his machine. After it was reported, allegations were made that one our techs must have put it there because the user had little knowledge of using computers. In the end, the user admitted the discretion and was suspended.

kanoneyez 71 pts

 RaduTanasescu sorry, intended "indiscretion," not "discretion"