Using radio waves, hackers at the French government agency ANSSI say they’ve been able to silently trigger voice commands on any smartphone thanks to access via Google Now and Siri. Reporting in the journalIEEE, they say it’s possible to operate the voice-activated command tools to do things like open malware sites, send texts or phishing emails, and even call specific phone numbers that generate cash for the hacker. But as “clever” as Wired reports this trick to be—the headphone cord is used as an antenna—it has several limitations, including that headphones with a microphone must be plugged into the jack; the hacker must be within 16 feet of the phone; and Google Now or Siri must be enabled.
“Additional functionality, especially concerning user convenience, has often come at the cost of some security,” Gavin Reid, VP of threat intelligence for Lancope, tellsForbes. “In this case the hack needs proximity to work and is a proof of concept needing specialized hardware.” And while it’s possible for people with this hardware to position themselves in crowded places such as airports and trigger some kind of attack on any qualifying phones within range, he adds that the odds are low. For the full article click here
from hacker samurai http://ift.tt/1ORDh2K
via IFTTT
No comments:
Post a Comment