Here's how secret voice commands could hijack your smarthphone

A muffled voice buried in a YouTube video can take over your phone, researchers say

Kitten videos are harmless, right? Except when they take over your phone.

Researchers have found something new to worry about on the internet. It turns out that a muffled voice hidden in an innocuous YouTube video could issue commands to a nearby smartphone without you even knowing it.

The researchers describe the threat in a research paper to be presented next month at the USENIX Security Symposium in Austin, Texas. They also demonstrate it in this video.

Voice recognition has taken off quickly on phones, thanks to services like Google Now and Apple's Siri, but voice software can also make it easier to hack devices, warned Micah Sherr, a Georgetown University professor and one of the paper’s authors.

The team found that they could mangle voice commands so that humans can barely recognize the words but software still can. The result condenses the words into a demonic growl.

“Ok Google, Open XKCD.com,” the voice says, and a nearby phone opens that URL.

It's easy to imagine how a hacker could direct a phone to a website containing malware, or instruct the phone to take a photo.

It might not work every time, but it's a numbers game. If a million people watch a kitten video with a secret message embedded, 10,000 of them might have have their phone nearby. If 5,000 of those load a URL with malware on it,"you have 5,000 smartphones under an attacker’s control,” Sherr said in a statement.

If the hackers know the ins and outs of the voice recognition software itself, and know its internal workings. they can create voice commands that are even harder to decipher by humans.

The researchers have uploaded samples of a scrambled voice command. In our tests with an Android phone, the commands sometimes went undetected or were misheard. When an audio sample asked “What is my current location,” Google Now heard it as “procrastination.”

But other attempts worked fine. Another audio sample tells the phone to turn on airplane mode, which it did.

To defend against the threat, developers of voice recognition software could incorporate filters to differentiate between human and computer-generated sounds, the paper said.

Join the PC World newsletter!

Error: Please check your email address.

Tags Phones

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Michael Kan

IDG News Service
Show Comments

Cool Tech

Crucial Ballistix Elite 32GB Kit (4 x 8GB) DDR4-3000 UDIMM

Learn more >

Gadgets & Things

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Family Friendly

Lexar® JumpDrive® S57 USB 3.0 flash drive 

Learn more >

Stocking Stuffer

Plox Star Wars Death Star Levitating Bluetooth Speaker

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?