Bluehat 2023: Android Malware Obfuscation

This is a recording of a quick talk I gave in early 2023 at the Bluehat Security conference. The presentation gives an overview of multiple Android Malware Obfuscation techniques, along with their implementations and disadvantages.

Timestamps:
00:00 Intro
00:25 Start of Talk
01:33 Defensive Obfuscation
02:47 Offensive Obfuscation
04:12 Static Techniques
05:09 Static Obfuscation Examples
06:06 Packing
07:10 Packing Recognition
08:18 Packing - Undefined Classes
09:13 Packing - Code Loading
09:38 Native Code
11:04 Native Code - Architecture Limiting
11:48 Native Code - DexClassLoader Via JNI
12:35 Runtime-Based Obfuscation
13:47 Runtime-Based Obfuscation Techniques
14:30 ART Hooking
15:21 Disadvantage - Brittle and Complex Code
16:06 Conclusion

---
laurieWIRED Twitter:

laurieWIRED Website:

laurieWIRED HN:

laurieWIRED Reddit:

[grimsysadmin]

I'm sure you are going to get a lot more subscribers as people come across your channel, really interesting stuff. Hope you keep going!