So I use Google constantly and when someone shared this article I was alarmed. However, I read the comments and one poster mentioned that there was a way to close it. http://gizmodo.com/oh-great-new-android-flaw-lets-hackers-into-your-phone-1720381448
The vulnerability is that Google Hangouts automatically downloads MMS messages which include things like videos. That means that someone can embed malware into images and videos and since Hangouts retrieves them automatically, you are exposed to the malware. Now, first I want to say that most anti-virus/anti-malware apps will scan images and videos from MMS, so if you have one of these apps installed (and you should), then you aren't really vulnerable to the exploit in the first place, but even if you don't, or in the event that your anti-malware misses the malicious file there is another way you can help secure your device. Uncheck the box. That's right. It is a little less convenient, since your phone won't just download the MMS on it's own, but that will give you the opportunity to recognize that you are getting an MMS from a number you aren't familiar with and delete it before it is retrieved. Go into the settings in Hangouts, select SMS, and uncheck the box. This is what it should look like:

No comments:
Post a Comment