How to stop USSD TEL attack on Android devices?

How to stop USSD TEL attack on Android devices? Yes, there is vulnerability in Android platform that can remote factory reset your Android devices like Samsung Galaxy S III or HTC One X by using USSD codes. I once heard people complaint that his Samsung Galaxy S II got wipe out when visited a website. How can that be happening? I was thinking… But turn out it is true. Check out below video…

How to stop USSD TEL attack on Android devices?
Simple, just install TelStop (link) by developed by Collin Mulliner. It will help to block and filter USSD codes first. Else your Android device will trigger the USSD codes immediately without asking for any confirmation…

TelStop in action

No worry much, most latest Android ROM / firmware do not have this issue. My Samsung Galaxy S3 does not have this USSD vulnerability (on the official Samsung Android 4.0.4 Ice Cream Sandwich firmware that I am using). But My Samsung Galaxy S2 which uses older Android 2.3 Gingerbread does have this USSD vulnerability. You can give it a test by visiting my test website here. No worry, it just triggers Samsung LCD Test Application.

Is your Android device safe from USSD TEL attack?


  1. allah razı olsun senden çok korkuyordum valla sen olmasan korunamazdım 🙂 daha test etmedim ingilizcem kötü ve ben türküm :)) bu uygulamayı yükliyecem umuyorum ki çalışır 😀
    (Thank you very much you saved my smartphone’s life.i dont test it.Im turkish my english bad 😀
    i will install this app.I hope it will works :D)

  2. Hi there,

    Just wanted to let you know that we (Bitdefender) already released a tool on the Play Store that protects against this vulnerability. Now, once you would tap on a exploiting link, Bitdefender will intercept the wipe command and ask you to decide what to do next. You may, if unsure, dismiss the USSD command.

    You can download it from:

    /Alin Vlad
    Global Social Media Coordinator at Bitdefender


Please enter your comment!
Please enter your name here