The Ways Hackers Are Taking To Win The Mobile Malware Battle
summary
Claims a live-built Android malware bypasses static signatures and sandboxes by abusing accessibility clickjacking and the overlay draw flags, uses apktool plus a Python injector to repackage an APK that dynamically loads code from a server, and successfully exfiltrates contacts during the demo. Notes repackaged apps and social platforms as delivery vectors, cites >80% of devices susceptible today, and shows the exploit works end to end against common analysis tools.
AI-written summary · about
chapters (29)
- 0:00Introduction
- 0:45Agenda
- 1:35Ping Pong Virus
- 2:30Stuxnet
- 3:33Pegasus
- 5:46Xcode Ghost
- 7:25Inspector
- 8:42Google Play
- 9:50Skype
- 10:15Apps
- 10:53Accessibility API
- 13:13Accessibility Checking
- 13:44Draw of Your Apps
- 14:39Demo
- 17:07Android
- 17:22Droid 505
- 19:53Dynamic Analysis
- 20:20Bypassing Analysis
- 22:22Static Analysis
- 22:35Advantages of Static Analysis
- 22:48Paint Analysis
- 23:04Model Analysis
- 23:59Model Analysis Problematic
- 25:57Dynamic Code
- 27:42Summary
- 28:01Live Example
- 35:42Limitations
- 37:05Solutions
- 38:35Recommendation
related talks
32mHacking the Hackers’ Code: Inside Android Malware
33mWhen Attackers Go Mobile-First with AI
42mIf 6,000 Mobile Malware Applications Could Talk! Ow, They Do, And A Lot!
25mMobile App Security: Threat Landscape
21mWhen Attackers Go Mobile-First: What Developers Need to Know
32mExploring Android Accessibility Malware
44mBeyond Desktops: The Rise and Transformation of Mobile Malware
56mModern Android Hacking