Android 'smishing' vulnerability discovered by NCSU researchers; Google has a fix incoming

[ ](http://www.engadget.com/2012/11/02/android-smishing-vulnerability-google-fix-patch-coming/)

The art of smishing (SMS-Phishing) has been practiced for [some time](http://www.engadget.com/2006/09/18/mcafee-virus-scan-hits-windows-mobile-5-0/), but a discovery by the wizards at [NC State University](http://www.engadget.com/all/ncstate) has uncovered a new vulnerability that could bring the aforesaid act back into the spotlight. Xuxian Jiang's research team recently identified the hole and confirmed that it impacts Gingerbread, Ice Cream Sandwich and Jelly Bean. Put simply, if an Android user downloads an infected app, the attacking program can "make it appear that the user has received an SMS, or text, message from someone on the phone's contact list or from trusted banks." This fake message can solicit personal information, such as passwords for user accounts. The team isn't going to disclose proof until Google patches it up, but the school has said that Google will be addressing it "in a future Android release." For now, however, Jiang recommends additional caution when downloading and installing apps from unknown sources, while also suggesting that folks pay close attention to received SMS text messages.

Filed under: [Cellphones](http://www.engadget.com/category/cellphones/), [Software](http://www.engadget.com/category/software/), [Mobile](http://www.engadget.com/category/mobile/), [Google](http://www.engadget.com/category/google/)

[Android 'smishing' vulnerability discovered by NCSU researchers; Google has a fix incoming](http://www.engadget.com/2012/11/02/android-smishing-vulnerability-google-fix-patch-coming/) originally appeared on [Engadget](http://www.engadget.com) on Fri, 02 Nov 2012 14:08:00 EDT. Please see our [terms for use of feeds](http://www.weblogsinc.com/feed-terms/).

######

[Permalink](http://www.engadget.com/2012/11/02/android-smishing-vulnerability-google-fix-patch-coming/)&nbsp_place_holder; &nbsp_place_holder;|&nbsp_place_holder; [NC State University (1)](http://www.csc.ncsu.edu/faculty/jiang/smishing.html), [(2)](http://web.ncsu.edu/abstract/technology/wms-jiang-smishing/) &nbsp_place_holder;|&nbsp_place_holder;[Email this](http://www.engadget.com/forward/20369311/)&nbsp_place_holder;|&nbsp_place_holder;[Comments](http://www.engadget.com/2012/11/02/android-smishing-vulnerability-google-fix-patch-coming/#comments)

URL: http://www.engadget.com/2012/11/02/android-smishing-vulnerability-google-fix-patch-coming/