| Individuals July 30, 2015


July 30, 2015

How to disable auto-fetching of MMS messages on a device’s default SMS app

By Lookout

When an Android device receives a video message via SMS, by default it will automatically download the file. Therefore, disabling auto-fetching prevents an attacker from getting a device to automatically download a malicious video containing Stagefright exploits, which allows the user to delete the message and avoid device exploitation. To determine your device's default SMS app, go to Settings > Default applications > Messages. While these instructions will make it harder for a device to be exploited via MMS, Lookout encourages Android users to exercise caution when viewing videos displayed on untrusted websites or included in messages from unknown senders.
Instructions for disabling auto-fetching of MMS for Hangouts:
First, open Hangouts, then, tap on the menu button in the upper left corner: SF1 Then tap “Settings”: SF2 Then tap “SMS”: SF3 (Note: If SMS is not listed here then a device does not use Hangouts for retrieving SMS/MMS and the user should instead disable auto-fetching of MMS for the relevant application.) Then scroll down and uncheck “Auto retrieve MMS”: SF4
Instructions for disabling auto-fetching of MMS for Messages:  
First, open Messages, then, tap on the menu button in the upper right corner: SF5 Then tap “Settings”: SF6 Then tap “Multimedia message (MMS)”: SF7 Then uncheck “Auto retrieve”: SF8
Instructions for disabling auto-fetching of MMS for Messaging:
First, open Messaging, then, tap on the menu button in the bottom right corner: SF9 Then tap “Settings”: SF10 Then scroll down and uncheck “Auto-retrieve” SF11
Instructions for disabling auto-fetching of MMS for Messenger:
First, open Messenger, then, tap on the menu button in the upper right corner: SF12 Then tap “Settings”: SF13 Then tap “Advanced”: SF14 Then disable “Auto-retrieve”: SF15

Author

Lookout