Android Malware Gets Phish-y

A working demo of the Android malware Android/Chuli.A.

Notes :
- The first request receives an HTTP 200 as opposed to 404's for the following requests since the first page has been simulated on the localhost for the purpose of the demo.

- The wireshark traffic has been filtered using 'ip.addr == 64.78.161.133' to display only malware related traffic using the IP of the attacker's server

More details can be found here :
http://blog.fortinet.com/Android-malware-gets-phish-y
http://www.fortiguard.com/encyclopedia/virus/#id=4805535

Show more