Zero click, silent, remote Android DoS

Re:Zero click, silent, remote Android DoS by MarkBlah on Thursday October 29, 2026 @04:54AM (#50286194)

feel free to curl it, or review the repo https://github.com/MarkBlah/smsofdeath/

[ Parent | on HN ]

Re:Zero click, silent, remote Android DoS by pogue on Thursday October 29, 2026 @05:30AM (#50286456)

01 06 88 80 80 80 00 BE → sent as a data SMS to port 2948

I'm not familiar with WAP Push and how it works, but is it possible to disable it or block that port on a non-rooted phone?

[ Parent | on HN ]

Re:Zero click, silent, remote Android DoS by motionlessveloc on Thursday October 29, 2026 @06:10AM (#50286762)

WAP Push is a specially formatted SMS that triggers your phone to download a URL. Unfortunately the vuln here appears to hit at the SMS parsing phase, which I don't think can be turned off easily.

[ Parent | on HN ]