95% of Android Devices Vulnerable to Stagefright Exploit

[CheeseMan42]

Security Researchers from the Zimperium Z Team have announced the discovery of six exploits found in the Android OS version 2.2 or later, which makes up about 95% of all Android devices. The exploits are collectively known as Stagefright and grant remote execution privileges to attackers. The most alarming aspect of Stagefright is that "a hacker need only send you a file containing malicious code" allowing them to "take control whether you respond to that sent file or not." Joshua Drake of Zimperium compared Stagefright to other exploits stating, "Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual – with a trojaned phone." Drake added that a patch has already been sent to Google, but it will be up to wireless carriers to get the patch to end users.

Source: Consumer Affairs

Back to original news post

[Gremlin]

Disable Auto retirieve MMS option in Hangouts, that should prevent anything until carrier pushes out the fix. 

Edited July 29, 2015 by Gremlin

[El_Capitan]

Disable Auto retirieve MMS option in Hangouts, that should prevent anything until carrier pushes out the fix. 

Other MMS as well. Samsung S6 has Messaging where you'd want to disable it as well.