↑
logo

Zero click, silent, remote Android DoS

Posted by MarkBlah |2 hours ago |22 comments

soltanov a few seconds ago

Golden Era of AI exploits began few days ago. Close the doors, otherwise you will get cooked.

tompagenet2 5 minutes ago

The Google Issue Tracker link [0] on the site shows access denied for me. Not sure if this is due to it being reappraised or because I specifically don't have access

[0] https://issuetracker.google.com/issues/509520497

grandfunction 16 minutes ago

This is going to cause absolute havoc. I hope carriers move fast to block this payload.

klhs an hour ago[2 more]

How could they possibly give this a "won't fix" if it can do what is reported here?

est an hour ago

I remember there was a tel: link than when I clicked it wipes everything on my samsung phone

yellow_lead 39 minutes ago[1 more]

> The attack is remote, needs only the victim's number, and shows them nothing.

err, how can I send an SMS like this? Would a mobile network even accept/forward such an SMS?

Little hard reading through the vibe slop here

villgax an hour ago[1 more]

Shouldn’t click this reminder

2 hours ago

Comment deleted

0xcrypto 2 hours ago[4 more]

Can we stop vibecoding a new website for every next vulnerability we find please? Thank you.

EdwardDiego 33 minutes ago

Omfg I am interested in this, I'm interested in wtf a WAP push is, but all I'm getting on this website is Claude-speak "not this, but that" and tables of irrelevant numbers, because Claude fucking loves a table.

Look at this Claude shit:

> Zero-click. The victim does nothing. No tap, no open, no notification.

> Silent. Nothing appears in Messages; the attacker's number is never shown.

Congrats, now you sound like yet another AI YouTube advertisement. "You control when we... ...woohoo"...

OP, please, if you think you have important information, please write it up yourself, I am so sick and tired of being sent LLM generated Markdown files with zero human input, and now you're just publishing that on a website.

FFS.

Oh you had Claude publish your name presumably so you'd get credit for "your" "discovery".

Mark Blaszczyk, please do better.