Google RCS Messaging Might Be Better, But Is Prone To Vulnerabilities

Android users now have access to the Google RCS messaging service. RCS messaging -- the Rich Communications Services is an upgrade to the standard SMS messages and is an internet-based messaging service. It allows the user to send images, videos, and other multimedia files similar to WhatsApp and other messaging services. However, now it's found to be unsafe.

Google RCS Messaging Unsafe

The RCS messaging is meant to replace SMS and MMS services. It first surfaced at the GSM Association back in 2008. But it was only a decade later in 2018 that Google began integrating the service in its Allo messaging application. The Google RCS messaging service is based on SIP and HTTP and enables group chats, filters, and other features.

A new report by the Security Research Labs shows that the RCS functionality isn't fully protected. The report shows that the platform allows for a range of different hacking attacks.

The research has found that hackers can gain access to the RCS configuration along with SIP and HTTP credentials. The report states that the lack of proper implementation of RCS functionality in many networks allows hackers to gain complete control over the user account. The improper implementation means a lack of certificate and domain validation, allowing attackers to manipulate the communication. It leads to ID spoofing, says GBHackers.

Google RCS Messaging Easy To Hack

The report shows a hacker can track users, impersonate them with ID spoofing, and conduct malicious activities like intercepting texts. Hackers can also start a website DDoS. The researchers said that the attacks "make current RCS deployments as vulnerable to hacking as legacy mobile technologies, such as 2G and SS7."

Recent reports say that there are nearly 310 million active RCS messaging users. There are 84 operators worldwide who support the messaging service and another 21will extend support in 2020. With so many users and operators on the platform, it's high time that Google enhances the security levels on the platform.