The attack, which hasn't been described in detail, works when the attacker sends the victim an SMS that could cause the phone to run malicious code or programs without the phone operator's permission.