Detecting money-stealing apps in alternative Android markets

摘要: The prevalence of malware in Android marketplaces is a growing and significant problem. Among the most worrisome concerns are with regarding to malicious applications that attempt steal money from unsuspecting users. These get uploaded under guise benign applications, typically third-party alternative market places lack proper security vetting procedures, subsequently downloaded executed by victims. In this work, we propose "Money-Guard", systematic approach detect stealthy moneystealing popular markets. Our technique relies on detecting two key behavioral heuristics seem be common across many money-stealing malware: hardcoded exfiltration notification suppression. our preliminary analysis 47 SMS-based stealing confirm 41 these follow above pattern, describe light weight detection will identify pattern.