The vulnerability was highlighted by Ravi Borgaonkar at the Ekoparty security conference, and makes use of USSD codes that are normally used by handsets to communicate with the carriers.

Even better, certain USSD codes can tell you if your calls are being redirected to a different phone number, a sign that your device has been hacked. Other codes can then stop the redirection.