码迷,mamicode.com
首页 > 移动开发 > 详细

Android Malware Analysis

时间:2015-09-22 23:21:21      阅读:199      评论:0      收藏:0      [点我收藏+]

标签:

A friend of mine asked me help him to examine his Android 5.0 smartphone. He did not say what‘s wrong with his phone, and he just wonder why his wife know everything he chat on the phone, and where he has been.

I‘d like to help him to figure out if anything wrong about his phone. When I start to monitor his phone, I find a very interesting stuff running on his phone. Obviously it try to pretend that it‘s Google Play App, actually it is not...Also I could see the destination ip and port...

技术分享

 

I start to analye and figure out where it is. Yes that‘s it..a very suspicious package-"com.example.downloader"

技术分享

 

Look at the Manifest and it‘s really scaring. It can read/write SMS, storage, contacts, calendar,locactions, process outgoing calls, even recording audio.

技术分享

 

Guess what? It also could record chat messages including Naver Line, Facebook, What‘s App, Skype, and WeChat. No wonder his wife knows everything he chat on the phone. You could see the Naver Line chat messages recording on its own Database as below.

技术分享

 

I told him what I found on his phone, and he was very angry. He swore to figure out what his wife has done to his phone and when she did this. I told hime that maybe she bought this App on the internet or her friend taught her to do so.  I think the reason why she did it maybe she‘s afraid that her husband does not love her anymore. If her husband has affair with other girls and she will know immediately.  Still it‘s illeagl and it‘s not a right thing to do to the one you love.

 

Android Malware Analysis

标签:

原文地址:http://www.cnblogs.com/pieces0310/p/4830825.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!