On the radio they mentioned that a phone's standard messaging app would be vulnerable the moment it downloaded the poisoned video file (prior to the user watching it).