Pierluigi Paganini July 03, 2018

Some Samsung devices are randomly sending photos taken with the camera to contacts in the address book without permission.

Do you have a Samsung smartphone? There is something you need to know.

Some devices are randomly sending photos taken with the camera to contacts in the address book without permission.

The problem affected Galaxy S9 and S9+ devices, but we cannot exclude that other devices may have been affected.

The news was first reported by Gizmodo, several users reported the anomalous behavior on Reddit and the company official forums.

“Sending pictures to others is one of the most basic functions of a smartphone, but when your phone’s texting app starts randomly pushing out photos without your knowledge, you got a problem..” reported Gizmodo

“And unfortunately, according to a smattering of complaints on Reddit and the official Samsung forums, it seems that’s exactly what happened to a handful of Samsung phone users, including owners of late model devices such as the Galaxy Note 8 and Galaxy S9.”

One user explained that his phone sent all his photos to his girlfriend over the night, but there was no record of it on his messages app. The expert discovered that there was a record of this activity on the mobile logs.

“Last night around 2:30 am, my phone sent her my entire photo gallery over text but there was no record of it on my messages app. However, there was record of it on tmobile logs. Why would this happen?” wrote the user on Reddit.

The unwanted messages were sent out via the Samsung Messages app, some users discovered the issue after they received a response from the recipients that received the photos.

A Samsung confirmed it is aware of the reports” and that its technical staff is investigating the problem.

Below the list of problems observed since the RCS Messaging was enabled and occurs with the SCHEDULED TEXT feature.

• Scheduled Messages are sent prematurely
• Scheduled text Messages end up in WRONG threads
• Messaging incorrectly displays scheduled messages as “sent” when, in fact, the other party has not received them.

Clearly many users are speculating this glitch was introduced with the push of RCS messaging updates by telco carriers.

As a temporary measure, Samsung owners can revoke Samsung Message’s permissions to access storage (Settings -> Apps -> Samsung Messages -> Permissions -> Storage).

Concerned customers are encouraged to contact us directly at 1-800-SAMSUNG

Pierluigi Paganini

(Security Affairs – mobile, bug)

[adrotate banner=”5″]

[adrotate banner=”13″]