Μερικές κρυμμένες φωνητικές εντολές σε ένα βίντεο του YouTube είναι αρκετές να παραβιάσουν κάθε κινητή συσκευή (smartphone) που uses Android or iOS according to the researchers.
A team of seven researchers from the Universities of California, Berkeley, and Georgetown devised an attack using deformed voice commands hidden in YouTube videos.
The attack works when the victim watches a "tease" on YouTube that contains hidden voice commands. The video does not need to play on their mobile device, but on any nearby laptop, smart TV, tablet or other smartphone.
The mobile collects the garbled commands, and the audio filtering features that Siri or the Google Now they will clear the sounds and execute the commands.
Researchers have, as you will see below, recorded their attack on videos. The video shows that some of the distorted voice commands are easy to hear, and a man with enough attention, but some of the commands are impossible to hear from a human ear.
The kind of hidden commands that can be embedded in such videos are simple searches on Google with instructions for downloading and installing malicious software that ultimately allows the attacker to take full control of the device.
Technical details about the attack are available on the official websiteσελίδα of the project.
Watch the video presentationς
