All Your Money Belongs to Us (Me)
summary
Creates a fake free Wi‑Fi hotspot and a lure app to install malware that harvests Tesla credentials and enables keyless driving; uses a code injection framework to decompile Android bytecode, hook a sendMoney method and change amounts at runtime (demo changes €3 to €420 and redirects a €0.33 donation to attacker). Demos run successfully. Assesses high likelihood but limited per‑device impact and recommends static analysis, obfuscation and certificate pinning plus dependency scanning.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:49Let's hack a tesla
- 5:17Let's hack a banking app
- 11:48How did I do it?
- 14:40How to deal with it
- 22:25Code obfuscation
- 23:13Runtime protection
related talks
45mI just hacked your app!
51mMoney Doesn't Stink - Cybercriminal Business Insight of A New Android Botnet
57m(In)Security of Mobile Banking
36mI just hacked your app!
26mAccessibility Service Malwares
45mI just hacked your app!
32mHacking the Hackers’ Code: Inside Android Malware
44mI just hacked your app!