View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Networks
August 26, 2014

iPhone bug can allow making calls automatically

The flaw works for Facebook Messenger, Gmail and Google+ apps installed on an iPhone.

By CBR Staff Writer

A potential bug in iPhone allows devices to automatically make premium calls and blow up victims’ phone bills and pinch their personal details in some cases, according to a security researcher.

Andrei Neculaesei noted that the iPhone maker allows apps to make phone calls after users tap a number on screen and by making out actionable text with tags termed as Uniform Resource Identifiers (URI).

Neculaesei noted that the ‘tel:’ URI system can be exploited by wrapping JavaScript together with the target URI that automatically executes the call without waiting for a user to tap on screen.

Further, the vulnerability also allows hackers to force devices to dial premium numbers that are rapidly selected on the receiving end, and accumulate amount charged to the victims’ phone bills.

According to Engadget, hackers would only require to send out spam messages with a masked URL to the manipulated code to execute the scheme.

Neculaesei demonstrates that the flaw also works for Facebook Messenger, Gmail and Google+ apps installed on an iPhone, with several dozens of similar apps also being vulnerable.

Content from our partners
Powering AI’s potential: turning promise into reality
Unlocking growth through hybrid cloud: 5 key takeaways
How businesses can safeguard themselves on the cyber frontline

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.