Disseny d’un malware basat en Android i incident response

Abstract

[en] The following project focuses on the development of a malware attack campaign using a Java-based trojan for mobile devices with the Android operating system and the subsequent incident response that should be carried out in the event of detecting a trojan like this in a business environment. The main idea of the campaign is to trick the users into believing that they are installing an application called "ListaCompra" to keep track of the items they want to buy at the supermarket. But what the user will not know is that this application will also be able to hijack the user's registration credentials, credit card credentials, photos stored on the device, contact list, and will also be able to simultaneously take pictures and screenshots in real time. The project also includes a prevention guide against this type of malware and a detailed guide on how to properly respond to incidents in order to mitigate the threat and restore business continuity as quickly as possible.