What you'll learn

Android applications are a powerful vehicle to deliver content and new experiences to the users of mobile devices. Unfortunately, bad actors can also use this type of applications to steal information, user credentials and commit fraud. This talk will describe how the members of the Android malware research team identify malicious applications on a daily basis, from detecting spyware to finding and responding to phishing campaigns. Salvador Mandujano will introduce some of the most severe malware categories, static and dynamic analysis considerations that reverse engineers need to have in mind when studying Android apps, and common obfuscation challenges that need to be resolved in order to produce evidence that an app's behavior is affecting users and violating Google application safety policies.