Protect yourself from data loss through remote wipe or other harmful actions of USSD hacks.
In order to protect your device from remote wipe and other USSD attacks, make sure that ESET USSD Control is set as the default dialer:
1. Install ESET USSD Control on your device.
2. Use your Android phone to visit our test page: http://www.eset.com/tools/ussdtest (note that this only contains a checker and will not make changes to your phone).
3. When prompted to complete action, check "Always perform this action" and select ESET USSD Control.
For step by step installation please follow our Knowledge Base http://kb.eset.com/esetkb/index?page=content&id=SOLN3139
Please note that once installed, the app runs invisible in the background, with no icon on the home screen. ESET USSD Control only interacts with the user when an attempt to run a harmful USSD code is detected. To make sure the app is installed correctly, go to Android Settings > Applications and look for ESET USSD Control.
What is USSD?
The purpose of USSD codes is that telecom operators can provide distance support for phone devices. An example of such code is one that displays IMEI number (*#06#), but there are also USSD commands that can wipe all data and restore a phone to factory settings.
How can USSD attack be launched?
Protection against USSD (Unstructured Supplementary Service Data) attacks is an essential security layer for Android devices, since these attacks can be easily initiated by all means that lead to visiting a website containing malicious USSD command such as SMS, QR code, or simply by tapping a fraudulent link in the browser.
How does ESET USSD Control protect you?
By checking for malicious codes before they are executed, ESET USSD Control makes sure that all data on your Android phone stay safe. The app displays a warning window each time a malicious USSD code is found, blocking the execution of the potentially harmful command.
To create shortcuts follow the steps below (screenshots are provided).
1. Add the widget to the home screen. This is done by long pressing on the home screen, selecting 'Widget' from the menu provided and selecting 'USSD Dialer' from the list of widgets.
2. Enter the 'USSD Code' on the configuration screen. You can also enter a 'Friendly Name'. If 'Friendly Name' is provided, it shows up on the home screen, otherwise the USSD code is shown by default.
3. Click 'Save' to place the configured widget on the home screen.
Clicking 'Cancel' at anytime on the configuration screen does not add the widget to the home screen.
Create multiple instances of the widget on the home screen one for each USSD code.
Note : The widget supports USSD codes in the format prescribed by Mobile Application Part 1. If USSD codes for your service provider are not supported, please provide feedback.
Dial/call function from the application will be directed to available phone dialer.
Certain Android devices are currently vulnerable to a USSD attack.
Made in Indonesia.
The rights of root are necessary for the program for processing of USSD answers to Android 4.2.2 above. At their existence use the USSD Mode 5.
In of Pro - version additional:
- Opportunity for each sim card to appoint some USSD requests and for each inquiry to appoint some indicators for parsing of various groups of figures in the answer.
- Processing of answers from SMS
- Various widgets (1x1, 2x1, 3x1, 4x1) are available, for each widget on a desktop it is possible to set the settings (transparency, a font size, an icon, etc.)
- Possibility of viewing, editing, removal, unloading in the file of the magazine of the program for the chosen period, viewing of the detailed and grouped statistics
- Chart of balance and diagram of expenses.
-Possibility of an archiving and restoration of base and settings is added
For each sim card it is necessary to appoint the USSD request code, to specify number of numerical group for answer processing. (Let's say the answer to the USSD request looks like: "Balans:43,88 dollars. You look animated films: * 728*1# (11,86 dollars/month)". Here 4 numerical groups: 43,88; 728; 1; 11,86 . Us the first interests. )
It is possible to adjust the schedule of a parcel of USSD requests:
After incoming and outgoing calls and SMS, after the end of Internet connection, at the appointed time.
It is possible to establish a indication of a negative number (Negative Prefix). Let's say the answer to the USSD request looks like: "Debt of 2.80 dollars. " If to establish value of Negative Prefix equal "Debt", the program will understand that it is necessary to replace "Debt" in the answer with a minus. By default a sign of a negative number - a symbol "-".
The program needs to be installed in the main memory of the smartphone.
For work of the program it is necessary to remove or freeze other programs working with USSD requests (USSD checker, etc.). After installation single reset is required.
The program was tested on the MTK(6516, 6575, 6577, 6589 platforms), also works at some smartphones on Qualcomm and Samsung Duos.
The USSD Mode 0 is suitable for the majority of phones except MTK 6573 and Samsung Duos.The USSD Mode 1 is suitable for the majority of phones on MTK 6573.
The USSD Mode 2 mode has to work at Samsung Duos except S7562. On Samsung S7562 choose the Mode 0 mode. On HTC Desire SV and HTC Desire V use Mode 3.
USSD Mode 4 - a mode of a "silent" USSD request for smartphones on MTK (root can be demanded).
USSD Mode 5 (the rights of root are necessary) - a mode of a "silent" USSD request, is suitable for all smartphones. The mode is compatible to Android 4.2.2.
If when using Mode 5 after reboot the network isn't restored, try to change a submode. On the Chinese DualSim on Qualcomm (ZTE 880, Huawei 8825, etc.) and Samsung S7562 try to change the "Mode of queries" control. If in Mode 5 there is no balance updating (on one or both sim cards), try to increase a "Wite after boot" and change a submode. After submode and Wite after boot change it is necessary to reboot the smartphone (not fast reboot ).
Before removal of USSDDualWidget don't forget to remove a daw in Settings of phone - Security - Select device administrators.
Using this application anyone can easily save their required USSD, based on the operator and make a call easily .User have the full freedom to Add /Edit USSD according to their provider .Default USSD code provided depending upon provider. If any USSD code is not working please go to the Add/Edit screen and based on the region configure the USSD.
Please before putting any bad comment send me a mail. I will try customize the changes based on your need. Few people put bad comment without any explanation which discourage developer effort.
When a certain ussd-request on most devices can be reset to factory settings. Thus ussd-attack victim to lose all personal data. If data ussd-attack victims are not in sync with your computer, or any web service, they can not be restored.
This application will help protect your device and your data from this vulnerability.
If ussd-request contained in the html-page, QR-code, NFC you will be offered an alternative action to complete the request. If you are not sure of the safety ussd-query select list IM TelControl.
IMPORTANT - You MUST restart your phone after installing or updating the app. Also, please launch and configure the app to start blocking messages.
This is a free app and has no ads.
This app selectively blocks balance update messages that carriers send after each call, typically on prepaid plans. These balance update messages show as annoying popups after end of each call.
Technically, these balance update messages are USSD messages, and cannot be filtered by SMS blockers. Hence, this app specializes in blocking USSD messages.
You may choose to block messages that contain a specific string (substring match), or a list of keywords (comma separated keyword list), or advanced users can specify regular expressions that when matched trigger blocking.
You can also choose to show the balance update message once per day (or week/month). This will cause the first balance update message to show up, and all other messages will be blocked for the rest of the day.
Last 25 messages are saved in the message log, along with indication if the message was blocked or allowed.
Credit to commandus.com blog for USSD handling tip!
If you encounter an issue, please make sure you have restarted the phone after installation. Please email me if that does not resolve the issue.
Technical users - this app actually doesn't need READ_PHONE_STATE permission. I've added it so that Android doesn't auto update this app from 1.0 to 1.2, as that requires a restart.
How it works
When you click on a web link or scan a QR code, Android will open a dialog with a list of apps that you can choose from to complete the action. Select ‘Avira USSD Exploit Blocker’ and set it as the default.
Protecting your phone from the USSD Android exploit is that simple!
What is a USSD code anyway?
USSD codes are keypad commands that can be used to access a variety of phone functions, from checking minutes to accessing expert controls. USSD commands typically contain a mixture of numbers, stars and pound signs.
The operating system your smartphone is running may be vulnerable to USSD commands that could wipe your entire phone.
Tapping on a link to a cleverly coded web page could order you phone to reset itself to factory settings and disintegrate all your private data with it.
Any Android phone running Phone.apk v 4.1 or lower is at risk and that's the broader base of them. Install Bitdefender's USSD Wipe Stopper to protect against such attacks. Now, once you would tap on a exploiting link, Bitdefender will intercept the wipe command and ask you to decide what to do next. You may, if unsure, dismiss the USSD command.
Find out more about this security vulnerability at http://www.hotforsecurity.com/blog/bitdefender-wipe-stopper-prevents-remote-ussd-attack-on-androids-3657.html
or in prestigious press outlets:
Tags: ussd, ussd code, ussd check, android ussd, url, security
This application can automatically close/dismiss the USSD popup dialogs and turn them into standard notification messages.
Both, network and user initiated USSD messages are dismissed and saved. Messages are dismissed, not blocked. You can get back to your balance, data usage and other important alert messages later.
If you find even the notifications too disturbing, you can uncheck the Show notifications in App info system menu.
Pro version has no ads and a widget with recently used requests.
** Xposed framework is required http://forum.xda-developers.com/showthread.php?t=1574401 **
Ussd blocker will block the annoying USSD balance update popups that come up on your phone, each time you make a call or change data connectivity. This app is like a silent inbox for all your USSD popup messages.
Two main reasons to use this app:
- No usage popups especially when you don't have the time to read them, e.g after ending a call or unlocking your phone.
- USSD messages are lost once you dismiss them. So, if you are on a prepaid connection and want to know when and how you lost your balance, you can get it from your history of usage update messages in this app.
- If you are rooted, install Xposed framework from here http://dl.xposed.info/latest.apk and reboot your device.
- After installing the app, enable the Ussd Blocker Xposed module and reboot
XDA support thread:
Android devices allow apps to register for certain URL types. The "tel:" URL type for example enables the user to initiate a call right out of the browser.
The G Data USSD Filter registers for this specific URL type and checks URLs of this type for USSD codes.
When starting the app for the first time you have to activate the filter manually. Just click on a "tel:" URL, or alternatively use the test URL we provide on the app's main screen. Then select the G Data USSD Filter as a default app for these types of URLs.
The USSD filter will capture all "tel:" URLs on your device in the future and check for USSD codes.
If a USSD code is found, the app shows a blocking page and prevents the execution of the code.
If the URL processed contains just an ordinary phone number, the app lets you call the number by tapping the "initiate call" button.
May the USSD code be executed anyway?
If you need to execute the USSD code, tap the "copy" button on the block page and paste the number into you telephone-app's dial pad. Be aware though that USSD codes have a variety of uses up to a factory reset of your phone. Only execute such a code, if you know what you are doing.
Does this app delete or damage other apps?
No, the app installs itself as a filter. No data is altered or deleted in any way. The G Data USSD Filter simply prevents USSD codes from being executed via an URL.
Why does this app need telephony permissions?
if the phone URL is clean, you should be able to call it. We need to register for this permission to let you do that.
Does the app work for QR-Codes and NFC Transmissions?
Yes, the filter checks URls contained in QR-Codes or transmitted via NFC for USSD codes.
Tags: USSD, URL, Security
It a kind of its own. A one and only application available for USSD Codes Collection of India. It includes all the USSD codes for Balance Check, 2G Internet Balance, 3G Internet Balance, Recharge, Know Your Number, Do Not Disturb Service, SMS Packs, Net Packs, Special Packs, Customer Care Number, Activate Internet, Deactivate Internet, Activate or Deactivate any Service, Caller Tunes, Free Internet, Free Minutes, Full Talk Time, Mobile Internet, Balance Transfer, Night Plan, Local SMS, National SMS, ISD Packs, Rate Cutter, Last Call Charges, Service Menu, Daily Weekly Plans, Complaint Number, Direct Customer Care Call, GPRS Settings, Caller Tones, Voucher Recharge, VAS Balance, Miss Call Alert, E-Recharge, Tariff Plans, STD plans, Landline plans.
Including USSD Commands for India's Most Popular Mobile Network Operators:-
* Loop Mobile
* Virgin Mobile
Tags: Mobile USSD Codes, Mobile Secret Codes, Mobile Hidden Codes and Tricks.
Android Permission Blocker is the cheapest, easiest way to take back control of all of those permissions apps require. Why does a flashlight app need access to your contacts? Why does a news app require permissions to read your SMS text messages? With Android Permission Blocker, you no longer need to worry about these questions. Instead, simply download the apps you want, and block the permissions you don't want the app to have. It's that simple. After a reboot, the app will no longer have access to those permissions.
How does Android Permission Blocker work, you ask? Simply stated, this app uses root permissions (which is why you need a rooted phone) to modify the android subsystem to no longer provide specific permissions to apps as requested by you. NOTE however that SOME APPS WILL CRASH if they do not have the permissions they need. This has nothing to do with how Android Permission Blocker blocks permissions, but rather how apps behave when a permission it requests is not granted. Since app developers expect that all permissions they request will be granted, they do not verify they got the permission before using it. Therefore, when you block a permission, some apps will crash when they attempt to access it. When that happens, you can either re-enable that specific permission, or, if you would prefer the app not have that permission at all, uninstall the app.
Note Android Permission Blocker currently only blocks permissions for "non-system" apps. Non-system apps are all the apps that you install, not the apps that come pre-installed on your phone in the "system" directory. Also note that the app can not yet prevent other apps from running at start-up. We are working on a solution to this and will release e new version once we have one.
Any questions - please send an e-mail!
It is common for advertising networks to collect information on how you use your device. Your information is then used for targeted marketing campaigns.
Some common and aggressive methods include:
• Pushing ads to your Android notification bar
• Creating unauthorized shortcuts on your home screen
• Modifying the default browser, homepage and bookmarks settings
• Subscribing you to emails and text messages when an ad is clicked
• Making phone calls and downloading malicious files when an ad is clicked
TrustGo Ad Detector safeguards you from malicious advertising and has the ability to detect ads from over 100 mobile advertising networks around the globe.
TrustGo Ad Detector is part of the TrustGo Antivirus & Security family.
To download the free, full version of TrustGo Antivirus & Security, go to http://tr.im/428tv
TrustGo Antivirus & Security provides the best all-around protection for your phone from malware, spyware and trojans. Remotely locate your phone, lock your phone, set off an alarm or simply wipe your personal information if your phone is missing or stolen.
Learn more at http://www.trustgo.com.
Got questions? Drop us an email to firstname.lastname@example.org.
Connect with us to find the latest updates:
More from developer
The picture stored in the cloud can be watched from everywhere with a browser or for example my App WebLiveWallpaper. Upload picture with various methods like http, ftp or Dropbox, send it with email or store on your sdcard for example to create a timelapse video.
Use as simple but mobile timed webcam with refresh rates from seconds to hours, with motion detection or your defined daily activity times. High resolution pictures are also possible. Mark the pictures with text or image to advertise for your place or business.
Very easy to use with opensmartcam.com or SENSR.NET.
This app provides me with a simple possibility to mail someone (my wife) and start refreshing a webcam view of what I see with one buttontap. Also it can work as a more static webcam with set activity times and picture imprint if you got a spare or partially broken phone you want to place somewhere connected to power running all the time ...
I will develop this further later after I fixed more bugs on my WebLiveWallpaper App.
Easiest usage without much setup hassle is with sensr. Then you do not even need your own homepage/server!
In the app press the MENU phone button for settings!
Http setup for your own server:
To enable your personal webcam put the included (see http settings in app or support forum thread) two files on your server.
Your personal webcam is then viewable at
Server address to be entered in Settings of App is
You also have to enable the server to write to this directory - chmod!
And you should really enable password protection for your website if you do not enhance the php page with some security measures (filesize limit, only jpg allowed, ...). Otherwise everyone can access your camera pictures and possibly even your server!
This webcam app is a bit different. It does not stream video. It is not meant to be placed next to or connected to your Computer. It will not have nice camera preview, fx or settings because old/broken androids can be used. This camera is intended to run without user (interaction) after initial setup possibly with a cheap 2G mobile data plan (in some countries/carriers for example 30 MB of data are free and that is enough to upload several pictures a day!).
For unstable devices autostart and reboot after a number of taken pictures (my cheap jpad tablet for example crashes after about 70 pictures in a row) can be enabled in the settings.
Go here to find some support:
Android 1.5 up for old cheap hardware usage.
Open Source: http://code.google.com/p/mobilewebcam-android/
Update history (important updates):
+ gps location info for moving cams possible now
+ integrated webserver (simple, first version, WIFI only)
+ hex color input
+ control Intents (com.dngames.mobilewebcam.START, STOP)
+ night image detect, quality setting
+ white balance
+ timelapse video
+ zoom, frontcam
+ Background mode, Battery/Temp info
+ SMS remote control
+ experimental shutter sound mute
+ autostart and reboot settings
+ email pictures (no user interaction!)
+ store pictures on sd
+ motion detection fix
+ print PNG from sdcard over picture for nice effect, advertisement or marking
+ refresh rates throttle down until uploads finished
*NOTE: If you are having trouble, first consult the FAQ (Developer Website below).*
*For bugs, extra help, feature requests and general comments, email the creator or visit the development thread linked in the FAQ *
*Please report all crashes to the developer! If possible add the website you tried when the crash happened to the crash report! *
As an avid windsurfer I like to watch my home beach even on workdays and see what's going on. Maybe I have to take a vacation if the conditions are great. This live background enables me to always keep an eye on the spot.
WebLiveWallpaper can display a local picture gallery, download images from websites, show a webcam stream, and much more.
Use WebLiveWallpaper to:
*Cycle images from a folder on your device.
*Download a static image from a website.
*Display images from an online picture gallery, such as Facebook, Picasa, Flickr, Deviantart and all others.
*Show static images from a webcam.
*Display a webcam stream.
*Display small animated GIFs.
*Show snapshots from websites, including all elements viewable on your devices browser.
Other features include:
*A large selection of examples to choose and learn from.
*Advanced modifications made through XML.
*Specify refresh times, with different times for Wifi and 3G if desired.
*Specify daily activity start and stop times.
*Set Wifi-only mode to limit data usage.
*Specify Login/Password for private sites.
*Create a custom slideshow taking content from different sites.
*Choose to save every image, and whether to store on your SD card or on main memory.
*If viewing webcam images, choose to avoid night-time images.
To enable WebLiveWallpaper:
1. Long press on the home screen, or press
36 minigolf-courses with 'Knuddel' (hero of my game Knuddel's Quest) and his friends. Beat the top worldwide players records or your own.
PLEASE VIEW ingame instructions!
This is no simulation game but fun:
Hills, valleys and ramps ... Sand, speedups, teleports, magnets, barriers ...
Realtime shadows on the rolling and jumping ball!
18 training and 18 normal course holes! Highscores and multiplayer can be added later.
+ Most holes can be done with one shot!
+ You do not have to touch the ball for shooting - just hold touch anywhere on the screen and move the target around.
+ Restart game after pressing MENU.
+ Autoplace ball on start pad by tapping on left or right powerbar.
Wallpapers can be used from Sites like:
* Astronomy Picture of the Day (NASA)
* Star Trek
* Earth Science
* Left field
and more ...
A number of users of my (also free) but much more powerful WebLiveWallpaper only use it for a picture of the day. So this is the picture of a day part in a smaller and hopefully easier usable app with more predefined selections for picture of the day sources.
Please email me if you would like to see other picture of the day sources included!
If you want to see webcams, animations, image galleries or even websites on your homescreen (also included: live widget) please try my WebLiveWallpaper app. That app has a lot more settings to configure your background show.
Android versions without live wallpaper support can download images and set them as wallpaper manually.
Images are copyright to their respective owners and no images are included in this app. You use this to view images of various sources!
This game is based on my other minigolf game Knuddel's Minigolf but it will not feature the character Knuddel.
PLEASE READ ingame instructions on how to play!
+ You do not have to touch the ball for shooting - just hold touch anywhere on the screen and move the target around.
+ Restart game after pressing MENU.
+ Autoplace ball on start pad by tapping on left or right power bar.
This is the PC 1997-version of our first shareware-game for the Atari ST from 1993.
The level have many different things to explore like usable-items, buttons, monsters ...
Your game-position will be saved automatically every level.
The game has completely rendered graphics in SVGA.
10 tutorial and 40 normal levels for this FREE version.
Music and Profiles may be added later.
Attention: The linked example website in the stub app is not mine - so it can be offline or removed any time. Google for 'mjpeg' or 'axis cgi' if you do not have your own camera for example.
This enables you to open mjpeg video stream in the browser and watch it. Just open a link and watch the video. No longer an unknown, broken file will be downloaded. Also private password protected websites are supported.
Where is mjpeg used? Mostly mjpeg is used for streaming images from cameras placed all over the world presenting nice or interesting places to website visitors. Also most security cameras use mjpeg. Your Android phone can stream mjpeg with a lot of webcam apps, too! With the program VLC running on your pc mjpeg provides a simple method to stream any kind of video to your phone.
Please note: Mjpeg video streams cannot be paused, rewinded or skipped forward. They are always shown as send by the server without further user interaction possible.
Share offline: Delayed WIFI only sharing is possible.
Like Google+ share your photos instantly after taking them (optional).
How to use: Start app for settings and set up for example an email account.
Open Gallery -> press MENU -> Share -> AutoShare
Open Webbrowser -> touch website address and hold until Share menu appears -> Share -> Autoshare
Same in many other apps which offer sharing ...
After activating New picture in the system settings you can also have your photos shared/uploaded instantly after taking them without further interaction (like google plus).
If your @google.com email is not working - try @googlemail.com!
Why is this helpful?
Everyone is social now. Most of the time I am not. I often use the built-in Android share function to send stuff to myself. Or to my website.
Everyone is using DropBox now. Most of the time I am not. I still use my own FTP for data exchange and storage.
Everyone is sharing photos now. Most of the time I send simple text or links for later inspection to myself. All content is possible with AutoShare.
This simple app enables you after a one time initial setup to share content with a single click on AutoShare.
Advanced users: The http post method enables you to do EVERYTHING you can dream of with your shared content if you write your own php script receiving and processing the content (simple example php is included in the app settings). This method also keeps data traffic lower than processing everything on your Android or sending to multiple receivers. Upload pictures to your own gallery. Add links to your homepage. Send text to your blog. Share media. Try it.
Result of my little smallest-ok-game-contest tonight. Target was to publish another android minigame in two hours. It took about three but there is even some little value and fun in the game.
It also is an ad-game for the Hero Knuddel from my other game Knuddel's Quest which you should really try as it offers much more ...
Later I added an internet highscore table and changed gameplay to 2 minute puzzle attack.
Try to solve as many puzzles as possible with only a minimum number of switches in the given time.
Try to beat the other players from all around the world and put your name on top of the highscore table!
This game is a test of some new functions to be used Knuddel's Quest - a much better game than this one!
Timed gameplay for world highscore table.
Hint function to help find another matching pair.
Game detects when there is no matching pair left!
Users can use this app to check the status of remote android devices (like webcams). Or to follow with their PC what is going on with their device (no more complicated sdk/adb setup required!). No root required. Help developers to track down bugs by sending logfiles with your error reports. When sharing logfiles: please check if they contain any private data!
Developers debugging remote apps without computer connection can use this to monitor their app. Also they can use an easy Intent (com.dngames.remotelogcat.LOG) or send SMS to get a logfile via this app. You can also just add an Thread.setDefaultUncaughtExceptionHandler(...); to your app and then log with a remotelogcat.LOG Intent if it is installed. So no need to include libs like ACRA in your APP if you want to debug only sometimes.
Mobile data connection debugging is now possible, but without WIFI connection you need your own server with PHP or my app AutoShare to publish the logfiles.
This is intended to run in the background to debug other apps - to stop the background service please disable it in the settings!