Android Commercial Spyware Disease and Medication
summary
Demonstrates a working proof-of-concept spyware called Cameleon that registers broadcast receivers for received SMS, outgoing and incoming calls, reads contacts/IMEI and immediately uploads data to a cloud backend; shows how commercial spy apps hide icons and request device-admin to persist. Presents an automated detector, DroidSmartFuzzer, that fuzzes apps by injecting PDU-format SMS, forcing self-calls and simulating incoming calls, then flags apps that spike network usage during those events and caught the top commercial spyware tested.
AI-written summary · about
chapters (6)
- 0:00Introduction and agenda
- 1:46Understanding mobile spyware
- 4:46Proposed research methodology
- 6:36Developing Cameleon spyware
- 16:36Droid smart fuzzer demo
- 26:36Results and conclusion
related talks
30mReversing Mobile Malware
42mIf 6,000 Mobile Malware Applications Could Talk! Ow, They Do, And A Lot!
32mHacking the Hackers’ Code: Inside Android Malware
44mBehind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile Devices
24mRecent Mobile App Security Incidents from Real-World Cases
45mThe Discovery of a Government Malware and an Unexpected Spy Scandal
25mSimple Spyware: Android's Invisible Foreground Services and How to (Ab)use Them
56mModern Android Hacking