This Android SMS Of Death Attack Crashes Phones Without A Single Tap

If your mobile device is running Android 12 or 13, or some newer versions without the latest security updates, you're likely vulnerable to an "SMS of Death" exploit that can soft-brick your phone and render it unusable without a factory reset or without following specific steps using ADB (Android Debug Bridge.) 

The exploit was dubbed "SMS of Death" by the researcher who found and publicly disclosed it, after Google developed a fix for Android 14-17 in June and released it as part of the October 2026 security patches. While users on Android 14 or newer need only apply the latest security updates, there seems to be little to no recourse for potential victims on older Android devices beyond resetting the device any time the attack happens, buying a new phone, or getting a new phone number.

It has been a rough few months for Android users on a older phones. Thankfully this latest exploit is not like NoVoice, which targeted any Android device with security patches older than May 2021 and required a bootloader unlock and firmware re-flash to remove. Since Android 14 was released in October 2023, about three years ago, an estimated ~18% of all Android (12+13) users have no protection from this exploit, and it's unclear when or if Google plans to patch it for those users. Pixnapping has at least been partially-patched, and the addition of Advanced Flow to Android 17 at least mitigates the risk of non-Store apps on newer devices.

Per the full disclosure, the "SMS of Death" can be removed by a factory reset, or cleaned out using the Android Debug Bridge over a USB cord connected to a PC. But for most users, either of those solutions will likely be too cumbersome versus simply getting a new phone.

While there are technically other solutions to this problem, they are only temporary until a device has been updated or patched.