A Flaw In Samsung Phones Allows Users To Bypass Factory Reset Protection

FRP Bypass On Samsung Devices

On one side Google is trying to improve security in Android and offers various protection for user data, but on the other side manufacturers like Samsung are messing with the OS, causing all this protection for naught. Recently, a new flaw was discovered in Samsung phones that allows users to bypass the in-built factory reset protection in Android phones.

If your Android smartphone is tied to a Google Account, then the factory reset protection prevents thieves from being able to use your phone after just wiping it clean. Normally, a protected phone will demand you log in to its associated Google account following a factory reset to confirm it is you who is doing the reset. However, a new attack reveals how Samsung devices are vulnerable to an easy work-around.

This attack discovered by RootJunky, who released a video demonstrating how in just 10 minutes he was able to navigate around Factory Reset Protection in a Galaxy Note 5.

On Samsung phones, there appears to be software in place that allows users to access a connected USB On-The-Go (OTG) flash drive prior to completing that step. Basically, if you insert an OTG drive, the OS allows you to open files on it, even when you should be locked into the screen requiring a Google sign-in after the factory reset. To achieve this all you have to do is to put an APK on the OTG drive that does nothing but open up the settings. From there, you can disable the “unknown sources” security feature and install the apk. This will be give you a free reign over the settings.

To finally bypass the reset protection, you just factory reset from the settings rather than from recovery. After that, the phone will be a clean slate. This will be pretty simple for a moderately tech-proficient thief to take your phone and remove your stuff from it.

At this moment, we are not sure how many Samsung devices are affected, but we may soon see an array of update from Samsung in an effort to close this loophole.

Raja Rajan Avatar

Help Us Grow

If you like this post, please share it with your friends.

You are free to copy and redistribute this article in any medium or format, as long as you keep the links in the article or provide a link back to this page.

Subscribe to Newsletter




Privacy Settings

Privacy & Cookie Overview

Our website uses cookies to provide you with the best user experience possible. These cookies are stored in your browser and perform essential functions such as recognizing you when you return to our website, as well as helping us to understand which sections of the website you find most useful and engaging.

To learn more, you can read our Privacy & Cookie Policy or reach out through our Contact form.

Strictly Necessary Cookies

Strictly Necessary Cookies must always be enabled to ensure the proper functioning of this website and to allow us to provide you with excellent service. These cookies are also essential for saving your cookie preferences.

Google Adsense

We use Google AdSense to keep this site free by displaying relevant ads. AdSense requires essential cookies that cannot be disabled, but you can manage other cookies. We respect your privacy and provide options to control non-essential cookies.

For more details on how Google handles your data, visit Google's Data Usage Policy. Please review our Privacy Policy for more information on how we protect your data.

AddToAny

We use AddToAny for social sharing. It doesnโ€™t store cookies, ensuring a privacy-friendly experience. AddToAny complies with GDPR and CCPA by default.

For more, see their Privacy Policy.

OneSignal

We use OneSignal to send notifications to users who opt in. OneSignal complies with GDPR and is certified under the EU-US and Swiss-US Privacy Shield frameworks.

For more, see their Privacy Policy.

3rd Party Cookies

This website utilizes third-party cookies, which can enhance your experience and support our ongoing efforts to improve our services.

Google Analytics

We use Google Analytics to collect anonymous data, such as visitor numbers and popular pages, to improve user experience and site performance. Keeping this cookie enabled helps us refine the site based on visitor activity.

For more information, see Googleโ€™s Privacy Policy.

Discover more from Prime Inspiration

Subscribe now to keep reading and get access to the full archive.

Continue reading