Home
News
You are here

Samsung's TouchWiz vulnerable to one-click data wipe or reset attack (video)

By Daniel Petrov

Published: Sep 25, 2012, 7:44 AM

Samsung Android

Add us as a preferred source on Google Search

Samsung's TouchWiz vulnerable to one-click data wipe or reset attack (video)

Over at the Ekoparty security conference, Ravi Borgaonkar presented a session titled “Dirty use of USSD Codes in Cellular Network”, and what do you think was used for the demonstration?

Samsung Androids with TouchWiz, of all things. The guy demoed how a single line of HTML code can wipe the data on such handsets if you click it, since TouchWiz has a feature that automatically dials a code when a link is tapped.

The same goes for QR scans and NFC - Samsung's TouchWiz UI makes the dialer automatically execute the sequence, which can potentially force a factory reset code onto your unsuspecting phone, and wipe your data. Here is a video demonstrating the theoretical disaster.

Demo Dirty use of USSD Codes in Cellular Network en Ekoparty 2012 spamloco

Watch onYouTube

Get ready for back to school with OtterBox phone and tablet cases, AirPods accessories, and more. From everyday bumps and drops to the occasional accident, OtterBox helps keep your tech protected with options ranging from rugged to sleek and stylish.

Buy at Otterbox

View Full Bio

Daniel, a devoted tech writer at PhoneArena from 2010 to 2025, has been engrossed in mobile technology since the Windows Mobile era. His expertise spans mobile hardware, software, and carrier networks, and he's keenly interested in the future of digital health, car connectivity, and 5G. Beyond his professional pursuits, Daniel finds balance in travel, reading, and exploring new tech innovations, while contemplating the ethical and privacy implications of our digital future.