Reminds me of https://en.wikipedia.org/wiki/Stagefright_(bug)
The Google Issue Tracker link [0] on the site shows access denied for me. Not sure if this is due to it being reappraised or because I specifically don't have access
This is going to cause absolute havoc. I hope carriers move fast to block this payload.
I remember there was a tel: link than when I clicked it wipes everything on my samsung phone
Golden Era of AI exploits began few days ago. Close the doors, otherwise you will get cooked.
> The attack is remote, needs only the victim's number, and shows them nothing.
err, how can I send an SMS like this? Would a mobile network even accept/forward such an SMS?
Little hard reading through the vibe slop here
How could they possibly give this a "won't fix" if it can do what is reported here?
Can we stop vibecoding a new website for every next vulnerability we find please? Thank you.
Omfg I am interested in this, I'm interested in wtf a WAP push is, but all I'm getting on this website is Claude-speak "not this, but that" and tables of irrelevant numbers, because Claude fucking loves a table.
Look at this Claude shit:
> Zero-click. The victim does nothing. No tap, no open, no notification.
> Silent. Nothing appears in Messages; the attacker's number is never shown.
Congrats, now you sound like yet another AI YouTube advertisement. "You control when we... ...woohoo"...
OP, please, if you think you have important information, please write it up yourself, I am so sick and tired of being sent LLM generated Markdown files with zero human input, and now you're just publishing that on a website.
FFS.
Oh you had Claude publish your name presumably so you'd get credit for "your" "discovery".
Mark Blaszczyk, please do better.
We need this for opera houses. Send a few messages to each phone and we can enjoy the show without any ringing.