here's an app that blocks auto-execution of USSD codes from all sources (i.e. QR-codes, iframes, sms etc), not only wap push as the previous poster's link recommends:

https://play.google.com/store/apps/d...toresetblocker