> How is this even possible? I have always considered phones to be more secure then PC due to additional security measures (such as sandboxing for every app as

> How is this even possible? I have always considered phones to be more secure then PC due to additional security measures (such as sandboxing for every app as well as more fine granted permission systems). Zero Day Exploits are frequently unpatched unless you have a Nexus phone for Android or an iOS device. :/ and/or https://www.usenix.org/system/files/conference/woot12/woot12-final24.pdf https://www.usenix.org/system/files/conference/woot12/woot12... > We have demonstrated that memory corruptions in baseband firmwares exist and can be practically exploited. These security problems are to be taken seriously: practical exploitation of these completely compromises the integrity of the attacked handset. Merely coming into the proximity of a malicious base station is is sufficient to take over any vulnerable handset – no user interaction is required by the bugs we have outlined above. The cost of exploitation is low enough to make these attacks a reality even for attackers with a limited budget: for the price of a mid-range laptop – USD 1500 – an attacker can buy the hardware to operate a malicious GSM cell with OpenBTS. User interaction isn't even really required, just a rogue base station + a vulnerable baseband (and those are updated even less frequently, iirc, Apple and the Nexus line are the only ones that update those) https://developer.android.com/about/dashboards/index.html https://developer.android.com/about/dashboards/index.html Only 13.3% are up to date :/