Know How to Protect Android phone from USSD Code Attacks

by Khaled Md. Shariar on October 2, 2012

Aware of USSD exploit? This type of attack can completely wipe your android phone remotely by hackers. Know How to Protect Android phone from USSD Code Attacks.

By now you probably heard of USSD vulnerability on android which allows hackers to run malicious software remotely to reset your Android phone to its factory default settings and permanently delete your important data. Unstructured Supplementary Service Data (USSD) is a protocol used by GSM cellular telephones to communicate with the service provider’s computers. USSD can be used for WAP browsing, prepaid callback service, mobile-money services, location-based content services, menu-based information services, and as part of configuring the phone on the network. 



An issue has been discovered lately that affects (almost) all Android devices running an OS version below Android 4.1.x – Jelly Bean.  the exploit uses the Android dialer to automatically “call” a USSD code and perform certain actions, like completely erasing and/or wiping your device. With Samsung TouchWiz devices the issue was first discovered, where if any user just click a link on webpage it will lead his device completely reset to factory state.

Fortunately most security software developers have come up with solutions and ESET is among the first. Using ESET USSD Control you can prevent such security risks as having your device wiped. The app protects your devices from USSD code attacks executed via malicious SMS, QR code, or URL link. In order to protect your device from remote wipe and other USSD attacks, make sure that ESET USSD Control is set as the default dialer. Once you’ve done that  you’ll have no reason to worry about attacks. 

More info can be found on ESET Threat Blog.

Download ESET USSD Control Android App for free by hitting the widget below.

ESET USSD Control ESET Free

There is another app called G Data USSD Filter which  can also protect from such malicious attack. 

Download  G Data USSD Filter for android from the ink below:

G Data USSD Filter G Data Software AG Free

What is USSD?

The purpose of USSD codes is that telecom operators can provide distance support for phone devices. An example of such code is one that displays IMEI number (*#06#), but there are also USSD commands that can wipe all data and restore a phone to factory settings.

How can USSD attack be launched?

Protection against USSD (Unstructured Supplementary Service Data) attacks is an essential security layer for Android devices, since these attacks can be easily initiated by all means that lead to visiting a website containing malicious USSD command such as SMS, QR code, or simply by tapping a fraudulent link in the browser.

How does ESET USSD Control protect you?

By checking for malicious codes before they are executed, ESET USSD Control makes sure that all data on your Android phone stay safe. The app displays a warning window each time a malicious USSD code is found, blocking the execution of the potentially harmful command.

Sumber