Re:Zero click, silent, remote Android DoS
by ffsm8 on Thursday October 29, 2026 @10:28AM
(#50289680)
Huh, but then it's neither remote nor zero click if you need to locally install malware?
Or did I misunderstand you and can you input any phone number to cause this issue? If so that would sound more like a carrier issue then a android issue to me
Re:Zero click, silent, remote Android DoS
by MarkBlah on Thursday October 29, 2026 @10:33AM
(#50289766)
Huh, Yes victims phone number, bug is in android. Carriers just send messages.
Re:Zero click, silent, remote Android DoS
by zamalek on Thursday October 29, 2026 @01:16PM
(#50292569)
> Huh, but then it's neither remote nor zero click if you need to locally install malware?
The software is installed on the _sender_ device.
> carrier will resend the text message as there was no acknowledgment
I don't think this is what happens here, as this could then be fixed by providers filtering inbound messages with this content after the fact.
Rather, the SM seems to be stored in a database on the Android device and repeatedly processed, which is potentially much harder to fix.
Only “fix” for this attack is to place SIM card in a non-Android phone to ack the inbound messages, or wait a few days of constant disconnects.