Chamois - The Most Impactful Android Botnet of 2018

Explore the intricacies of Chamois, a sophisticated Android botnet that backdoors applications for ad, SMS, and install fraud, in this 28-minute conference talk by Maddie Stone, senior reverse engineer at Google. Delivered at the Security Analyst Summit 2019 in Singapore, the presentation delves into the botnet's origins, technical complexity, and custom archive format. Examine the anti-detection techniques employed, including benign payloads, forethought, testing, and network infrastructure. Discover the distribution methods and eager fonts used by Chamois. Learn about strategies to combat this impactful botnet, its infrastructure, and gain insights into its numerical impact. Enhance your understanding of mobile security threats and defense mechanisms in this comprehensive analysis of one of 2018's most significant Android malware campaigns.

Introduction
What is Chamois
How Chamois got here
Technical Complexity
Custom Archive Format
Anti Detection Techniques
benign payloads
forethought
testing
network infrastructure
distribution
eager fonts
how to fight Chamois
Chamois infrastructure
Chamois numbers