Microsoft Teams users may have received a notification on their mobile device 'FCM Messages : Test Notifications'. The vulnerability allows someone to exploit FCM keys stored in APK files in order to broadcast messages to anyone using a Firebase-based application — in this case, Hangouts. This is due to an exploit in Firebase Cloud Messaging (FCM) cross-platform messaging app which Teams and other collaborative software make use of. The test notifications first surfaced en masse at about midnight PST, with many people taking to Twitter, Reddit, and the Microsoft Community to complain about them or make fun. — Microsoft 365 Status (@MSFT365Status) August 27, 2020. The message says. I got a four notification alerts from Google hangouts that says "FCM Messages Test Notification!!!" And a lot of people have been getting “FCM Messages. Just a few days ago, Hangouts users saw a number of mysterious "FCM Messages" test notifications, and now Microsoft Teams is exhibiting … Recently, Google Hangouts users also received FCM Messages test notifications. Last week a vulnerability was published for Firebase Cloud Messaging (FCM), which many of Google's apps, including Hangouts, use to deliver notifications. I received 5 notifications this morning "FCM Messages Test Notifications!!!!" As per documentation, Notification Message - FCM automatically displays the message to end-user devices on behalf of the client app. Subscribe to Android Police's weekly newsletter, with the biggest stories, latest deals, and insight on the week's news. The notification, as reported by several users on Twitter and other social media platforms, just reads “FCM Messages” with “test notification” right below it. The notification states ‘FCM Message’. Recently, Google Hangouts users also received FCM Messages test notifications. Did you order a Galaxy S21, S21+ or S21 Ultra? This is mostly probably linked to some Firebase exploit. So it’s natural that you’re worried and, at the same time, curious about this enigma. The two incidents are likely linked, as they're connected to a recently published vulnerability in Google's push notification service Firebase Cloud Messaging (hence "FCM Messages"). Any ideas, what's up? Earlier today thousands of Microsoft Teams users reported receiving mysterious “FCM Messages – Test Notification” on their devices. Did you order a Galaxy S21, S21+ or S21 Ultra? Ultimately, the messages appear to be harmless (if annoying) for users, so you don't need to worry about the safety of your account or phone. Android is a trademark of Google Inc. | © Illogical Robot LLC, 2009-2021, Microsoft manages to stop mysterious 'FCM Messages' notifications that were bombarding Teams users, Could be due to a vulnerability in Google's push notification servers, mysterious "FCM Messages" test notifications. These two incidents may be connected to a vulnerability in Google's push notification service Firebase Cloud Messaging. on your Google Hangouts. If you’ve been thinking what these are, or why you’re getting them, read on! Just a few days ago, Hangouts users saw a number of mysterious "FCM Messages" test notifications, and now Microsoft Teams is exhibiting the same issue. Android is a trademark of Google Inc. | © Illogical Robot LLC, 2009-2021, Hangouts users shouldn't panic about mysterious 'FCM' notifications, The mass messages are likely tied to recent reporting on Firebase exploits, vulnerability was published for Firebase Cloud Messaging (FCM). A Microsoft Team user posted: “A couple of our users received random notifications on the Teams mobile app this morning. seems it is related to an exploit lets hope that Microsoft or Google plug it soon, otherwise I'll be uninstalling the Teams app on my phone. Thats it !! The code written thus far handles registration tokens and adds remote notification functionality to the app. alert labeled "FCM Messages." The FCM Server Key - Reading docs and validation of the key. I haven't knowingly done anything to trigger this and I haven't heard from Google that they are doing any testing. Available on mobile or on desktop, start making video or voice calls today. Recently, Google Hangouts users also received FCM Messages test notifications. We've confirmed that no further unexpected notifications are being sent to users' Android devices. Use Google Hangouts to keep in touch with one person or a group. The next example adds code that listens for topic messages and forwards them to the user as remote notifications. May be related to this issue with Google Hangouts: "FCM Messages Test Notification" - Security Issue ?- Hangouts Community (which I didn't have since I don't use it). A similar message was also received by users of Google Hangouts on 24 August. In recent days, users of both Microsoft Teams and Google Hangouts have reported receiving apparent test notifications mentioning FCM through the app. fcm messages test notification microsoft teams. Yesterday, some Hangouts users received a suspicious "Test Notification!!!!" FCM Messages. FCM Messages Phone Notifications From Teams. Either way, the notifications themselves should be harmless — the vulnerability apparently only affects Google's notification service, not user accounts or devices. Let's still hope that Google figures out a fix sooner rather than later — I don't think anyone wants to be woken by the sound of unnecessary notifications in the middle of the night. Microsoft has managed to put a stop to the rogue FCM notifications that have been affecting Teams. These two incidents may be connected to a vulnerability in Google’s push notification service Firebase Cloud Messaging. [Photo: courtesy of Microsoft… Google Hangouts might not be as popular as it once was, but there are still plenty of people hanging on to it. These two incidents may be connected to a vulnerability in Google's push notification service Firebase Cloud Messaging. Tapping the message opens the Hangouts conversation … In recent days, users of both Microsoft Teams and Google Hangouts have reported receiving apparent test notifications mentioning FCM through the app. As you can see in the screenshot I got four test notifications (after clicking on a fifth one just a minute before). Test Notification… The messages didn’t contain any suggested links or demand any action from the recipient as well. Just enter your email below. Well today there are loads of people across the world complaining that they are receiving this mysterious push messages on Microsoft Teams Chat applications well. It's unclear whether these notifications were sent by hackers curious to see how far they would come or if they're part of an effort by Google to eliminate the vulnerability. Just enter your email below. Back out of the Messages settings, and you can choose “Google Voice SMS” and/or “Google Voice voicemail” to set the notification sound for text messages (if you use that feature in Hangouts). Additional details can be found in the admin center under TM221041. We've isolated the source of the issue and applied a mitigation. Topic messages are FCM messages that are sent to one or more devices that subscribe to a particular topic. It's almost certain that these two events are related, but we don't yet know exactly what caused the mass notifications to go out. If you are an Android mobile phone user then you must have received suspicious FCM Messages push notification that read Test Notification! Other than that, nothing worse seems to have happened. A Microsoft Team user posted: “A couple of our users received random notifications on the Teams mobile app this morning. Test Notification” or similar notifications from apps like Google Hangout and Microsoft Teams. Recently, Google Hangouts users also received FCM Messages test notifications. After visiting Firebase Cloud Messaging / FCM,i understood that the keys grepped could somehow be linked to cloud messaging aka push notification services.I was yet to find an article that explained everything, so I started digging again. I haven't knowingly done anything to trigger this and I haven't heard from Google that they are doing any testing. More info: Users may have received notifications that stated: “FCM Messages : Test Notifications” or other similar variations of this message. It could be that Google inadvertently sent users a message while trying to fix the issue, or perhaps a curious hacker was poking around to see how far the vulnerability goes. Many people using Microsoft Teams and Google Hangouts have reported that they have received multiple strange alters in form of push notification on their Android/iOS mobile devices. My system: Android 8.0.0 on Samsung Galaxy S7 (Security update March 1, 2020). A good number of Hangouts users across the globe received some strange notifications yesterday, which may be linked to a vulnerability in Google's Firebase platform. These two incidents may be connected to a vulnerability in Google’s push notification service Firebase Cloud Messaging. Be aware of the settings in the “ Video Calls ” section as well. Google is aware of the issue and is investigating, and we've reached out directly for comment, as well; we'll be sure to update this post with any developments. Tapping the message opens the Hangouts conversation list, with no sign of this strange alert anywhere to be seen. von | Jan 19, 2021 | Uncategorized | Jan 19, 2021 | Uncategorized If it seems to be helpful, we may eventually mark it as a Recommended Answer. These two incidents may be connected to a vulnerability in Google’s push notification service Firebase Cloud Messaging. alert labeled "FCM Messages." Send. Yesterday, some Hangouts users received a suspicious "Test Notification!!!!" I got a four notification messages on Google hangouts that says "FCM Messages Test Notification!! Testing FCM — Generic Notification. Send. This is similar to the notifications sent to Google Hangouts users just a couple of days back. In any case, the messages themselves have been harmless. All of them seem to have received the same message from "FCM Messages" that states "Test Notificationsss!!!!" Subscribe to Android Police's weekly newsletter, with the biggest stories, latest deals, and insight on the week's news.