Dissecting Android Malware

By Anto Joseph on 05 Nov 2015 @ Groundzerosummit
πŸ”— Link
We need help to complete this entry! Missing: presentation, Video
I can help!
#android #application-pentesting #dynamic-analysis #malware-research #sandbox #privilege-escalation
Focus Areas: πŸ” Application Security , 🦠 Malware Analysis , πŸ“± Mobile Security , 🎯 Penetration Testing

Abstract

As mobile manufacturers and app developers have upped their game, so too have malware authors. This paper discusses Malware techniques like embedding VM’s, dynamic code instrumentation, dex class loading, exploiting user application vulnerabilities for information extraction, sandbox escaping and privilege escalations in android eco-system. The speaker has developed POC β€˜s/ Code Examples that uses the above techniques to hide itself from Google / Anti-virus scanners. Using anti-malware and self-integrity checks, it tries to prevent static and dynamic analysis.