November 11, 2026, 5:27 pm | Read time: 2 minutes
A message reaches the smartphone, remains invisible, and can still cause the device to crash. This is made possible by a so-called “SMS of Death.” It is a specially manipulated WAP-Push message that can crash the telephony service of Android. Particularly insidious: The owner doesn’t need to open or confirm the message. Instead, Android processes the data SMS automatically in the background. It does not appear in the normal SMS inbox.
Attack can trigger restart loop
Initially, the manipulated message can crash the smartphone’s telephony process. This can also cause an ongoing call to suddenly drop. However, the attack can be taken further. As security researcher Mark Blaszczyk explains on the platform “SMSofDeath,” the device can end up in a restart loop. Eventually, the smartphone may display the recovery mode.
In this case, do not hastily select “Wipe data.” This will delete the data on the smartphone. According to Blaszczyk, it is possible to get the affected device running again via a computer and the Android Debug Bridge (ADB). Those without experience should instead consult a professional.
Seemingly Harmless App Downloads Dangerous Banking Trojan
Critical Error! Bootloop Risk for Google Pixel Smartphones
These Android versions are affected
The faulty code, according to the security researcher, is found in Android 12 to 17. Corresponding crashes could be replicated on various Android versions. Google has since fixed the underlying error in the program code.
However, this does not mean that every smartphone is already protected. When the fix arrives on a specific device also depends on the respective manufacturer. A specific date for the bug fix cannot be provided based on current sources.
Owners of older smartphones should therefore check if a current security update is available. Depending on the manufacturer, the corresponding function can be found in settings under “System,” “Software update,” or “Security update.”
Also of interest: These Chrome extensions secretly read along during searches
Old mobile technology enables the attack
The attack uses WAP-Push. This technology allows special data to be sent to a smartphone over the mobile network. Android processes such messages automatically in the background.
This is precisely where the danger lies: The user does not need to see or open the manipulated message. It can arrive on the smartphone and cause damage without even appearing in the normal inbox.