Rebooting Your Phone Once a Week Can Help Thwart 'Zero-Click' Hacks, Says NSA
ICARO Media Group
In order to protect smartphones from potential hackers, officials are urging iPhone and Android users to regularly turn their devices off and on. The National Security Agency (NSA) endorses this method, which temporarily clears the massive stores of information constantly running in the background, including data from apps and internet browsers.
The motivation behind this recommendation is to counter "zero-click" hacks, which involve downloading spyware onto users' phones without them ever clicking on a link. Criminals can exploit these vulnerabilities to infect a device and gather data without any interaction from the user.
The NSA advises users to restart their phones once a week and also suggests turning off WiFi and Bluetooth connections to avoid cybersecurity attacks. Connecting to public WiFi networks is discouraged, and users are encouraged to update their phone's software and apps regularly.
According to an NSA document, restarting a phone is an effective but lesser-known method of mitigating the risk of cyberattacks. By rebooting, all apps are closed, and users are logged out of their accounts, including those for banks and social media platforms. This prevents hackers from accessing sensitive information.
The reboot method also thwarts spear-phishing attacks, where attackers send targeted fraudulent emails to steal login credentials and other sensitive data. By restarting the phone, the attacker's access is terminated, ensuring the security of personal information.
Surprisingly, a 2015 Pew Research study revealed that nearly half of smartphone owners rarely or never turned off their devices, while 82 percent reported rarely or never rebooting them.
In addition to rebooting, the NSA emphasizes the importance of frequent software and app updates to ensure device security. Outdated software can contain flaws that hackers can exploit, so staying up-to-date removes potential vulnerabilities.
To further protect smartphones, the NSA recommends disabling Bluetooth when not in use as it reduces the chance of unauthorized access. While these measures provide only partial protection, they mitigate certain types of malicious activities.
The advice from the NSA and other cybersecurity experts also includes turning off WiFi and deleting unused networks, watching out for SSID Confusion Attacks, using strong lock screens with passwords, and avoiding opening email attachments or links from unknown sources.
The Federal Communications Commission (FCC) also echoes the need to not tamper with factory settings or dismantle security settings, as these actions leave devices more susceptible to attacks.
Last year alone, Statista reports that 353 million people's data were compromised in the US through breaches, leaks, and exposures. In 2021, Apple's iMessage app was targeted by a significant zero-click exploit that bypassed the BlastDoor security feature designed to prevent such attacks. As a result, Apple filed a lawsuit against the Israeli cyber-intelligence firm NSO Group, known for its zero-click-capable spyware Pegasus.
Security researchers have referred to the attack as one of the most technically sophisticated they have encountered.
While these measures cannot guarantee 100 percent protection, following these guidelines will significantly reduce the risk of falling victim to cyberattacks and safeguard personal information on smartphones. It is crucial for individuals to prioritize their device's security to counter the increasing prevalence and complexity of threats to mobile devices.