A jailbreaker by the name of Pod2g has reportedly discovered a vulnerability in iOS that enables hackers and other general bullies to change the reply-to number in an SMS. You might think you’re getting a text from a trusted source, but it would actually be someone else entirely.
Using some simple trickery, a hacker could alter the number a text looks like it’s coming from a different source, like your bank. Or worse—your mother. Pod2g explains:
In the text payload, a section called UDH (User Data Header) is optional but defines lot of advanced features not all mobiles are compatible with. One of these options enables the user to change the reply address of the text. If the destination mobile is compatible with it, and if the receiver tries to answer to the text, he will not respond to the original number, but to the specified one. Most carriers don’t check this part of the message, which means one can write whatever he wants in this section: a special number like 911, or the number of somebody else.
Pod2g said it’s not a flaw that’s exclusive to iOS 6. In fact, it’s been a problem since the iPhone first came out five years ago. The takeaway here is that you should be skeptical of any texts asking for private info. Mum, why are you asking me for my National Insurance number? Because I’m a hacker, that’s why! [Pod2g via BGR]













Texting Your Mum Costs More Than Texting MARS
Facebook May Have Read Your Phone's Text Messages
Painful Neck? Smartphone owner? YOU May Be Suffering from Text Neck!
Not made clear in the source if this effects other phones, though The BGR article implies it.
well this specific bug wouldn’t effect phones other then the iPhone due to the iPhone becoming vulnerable because of a bug. Therefore other phone manufactures wouldn’t have this bug or have protection in place. However, i’m sure the UDH could potentially be modified on other phones if someone is willing to find a bug and create an exploit.
My understanding of this is that the problem is to do with how the iPhone handles the UDH, so my question was more along the lines of do other phones handle it in the same way.
I would highly doubt they do.