Despite the wide variety of mobile malware families, most can be categorized into the ones shown on
the screen.
We will start with the rats or remote access tools, which represent the most comprehensive threat to
mobile devices due to their broad functionality.
They typically enable extensive access to data from infected victim devices and are often used for intelligence
collection.
And this course, we will together learn how to create Iran's application.
Typical features provided by a mobile red application include the listing of device information such
as manufacture model operating system version and the Imai, which can be used to uniquely identify
your device and the user it can list as well.
All the applications installed on your device, it can retrieve the device.
Call history.
It can as well retrieve contact information from the device, address book, retrieve all the browsing
history and the bookmarks you have.
It will enable the hackers to get access to your s.m as send an estimate on your behalf.
Intercept a semi's as well as enable G.P.S. logging and location so that they will be able to trace
you.
It will capture as well you're a screenshot and will enable the attacker to manipulate the front and
the real cameras to enable access to the microphone device.
So as you can see, the attacker would have full remote access to your phone.
Some of the enhanced functionality is used by the red is to intercept Assam's messages so they can use
the messages such as ODP or Two-Factor authentication to compromise other services that you use elsewhere,
or a stalk where it's the legal commercial spyware that utilizes right functionality.
These devices will have the capability of surveying the end user.
Stockwell is a family of malicious application, which is somehow illegal because its commercial use,
but it utilizes wrapped functionality so that it surveys stork's the user.
That's why the name iStock, where you can as well call it spouse where so the right tools and this
talk were to fall within one family as well.
We have very well known applications which are commercially used mainly by governments that employ the
remote access mechanism, such as the remote control system.
ISIS released 2009 by a company called Hacking Team.
It is compatible Android R US and those days, BlackBerry and Windows, mobile phones and Symbian.
Another well-known right tool is called Finn Fisher, released in 2011 by the Gamma Group and the OS
compatability is mainly AOS, an Android BlackBerry.
We have as well two recently well-known tools named Pegasus and Kharma, merely targeting the iPhone
platform.
The next family is banking Chozen, which are popular subset of mobile malware that specifically target
mobile banking services.
Obviously, for financial gain, these Trojans are distributed and disguised as legitimate application.
Meanwhile, they embed additional functionality that intercepts user credentials or one time passwords,
etc..
Many of these banking Trojans are available for purchase on criminal forums, online mobile ransom,
whereas malicious software that seeks to deny victims to use fully their computing devices until a ransom
is paid by a mean of digital currency such as Bitcoin.
The concept of France, where is replicated to the mobile environment while taking the advantage of
the wild, the concept of friends, where it has been replicated within the mobile environment to take
advantage of the wide adoption.
While some mobile ransomware families attempt to end encryption of files on the mobile is not worth
it because there are cloud storage devices and where the user can easily retrieve his files.
So instead of encrypting the files on your mobile, the ransomware is locking the device by using a
display message.
Similarly, to mimic the ransomware attack on desktops.
So you need to provide a certain amount in digital currency so that you'll get the access code and have
full access to your mobile crypto mining malware.
Are further.
Adoption of traditional roving generation schemes applied to mobile devices.
It involves the Clear Channel of executing and calculating some algorithms to generate digital money.
It's worth noting that crypto mining requires a huge resources for processing.
But this is not worth it.
On the CPUSA, because the mobile C.P.U is not optimized for that.
But obviously Mallo writers are targeting, but obviously malware developers are developing such applications.
It will result in having solid performance on your mobile device.
The result of being compromised by crypto mining malware is likely to be observed by having a slower
performance on their mobile device advertising.
Click fraud.
There's another class of mobile malware observed through the distribution of tools designed to accomplish
advertising.
Click fraud.
So as you know, we have Google, for example.
They have the ad where the owners of such accounts generate money through click rates.
Another class of mobile malware is observed through the distribution of tools designed to accomplish
advertising.
Click fraud.
As you know, Google have Ad Mobb.
If I'm not wrong, AdMob to its assistant to set up advertisement on mobile phones in where the owner
of such account will generate money.
So they click for process is enabled through the creation of hidden HDTV request on these applications
to specific advertising resources associated with the actor.
So it will generate clicks on behalf of the user.
Without these annoying.
The purpose is purely financial gain.
It will not pose direct threat to your mobile phone, but it might cost you some additional traffic.
By using your mobile data.