Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs
summary
Demonstrates a concrete attack chain that harvests plaintext GPS from ad libraries, identifies high‑value locations, then injects code via javascript-binding-over-HTTP or dynamic-loading-over-HTTP to load native payloads that obtain Android context and call services (camera, SMS, calls, clipboard) without user notice. Shows live demos against real Google Play apps, reports exploitation across about 3.2 billion downloads, and explains how reflection, proxying and DNS/BGP hijack enable scalable targeting.
AI-written summary · about
chapters (7)
- 0:00Sidewinder attack intro
- 1:03JavaScript binding flaws
- 3:30Android context via JS bridge
- 8:27Live surveillance demo
- 12:45Ad GPS for scalable targeting
- 15:32Future protections & threats
- 16:15Conclusion
related talks
43mAttacking Android Applications
32mDirty Stream Attack, Turning Android Share Targets Into Attack Vectors
47mAttacking Android Applications
56mModern Android Hacking
53mAndroid: He protec, but he also attac
45mI just hacked your app!
30m"Latest Android threats and their techniques"
42mThe Ways Hackers Are Taking To Win The Mobile Malware Battle