Original subtitles

Once a victim in a student opens a fake as you noticed we get emitter session on some mobile device

and just by typing help you can see all the comments that you can implement.

And by the way nothing is showing on the victim machine.

So if you go to the victim smartphone and you check nothing seem Norman So everything will seem normal

soon No problem would be there.

So let's try a couple of comments.

For instance let's dump so called Lock Let's see the code.

Copy and paste and let's see.

Cannot has been saved to this fine.

And let me see this finds it next line.

So you should be in the home folder.

So you get into the home folder where is it you go.

Opens fine.

You can see all the logs.

And this is scary and everything related if you need to for instance to

open Zakheim or opens the mike.

So let's do that let's webcam snapped and this will take snap picture from the cam based

and he opens it and the picture are inside this specific.

And as you can see it opens the cam and I believe if you type one or two it will show you the front

cam or the back.

You can open the mike you can open so it's quite controlling.

You can do anything actually on this device including shutting down the device or open Zalmai can start

listening and so on.

So this is how to create a fake app and how to get access on a mobile device.

Once the fake app is an orange now the only problem with this attack is that it requires some social

engineering and this will be explained later on.

For instance if you just run the app the same way it is.

It will not be effective.

I mean if you use any mobile user and install the app and he opens up and nothing happened he will be

suspicious.

But if you merge this is another known app like any airport game app or something like that.

This actually will be easier to convince the victim to install it and open it.

But still you will not be able to put such app on any store but you can put them on any of those free

app web site.

So later on we can see some tuning process that you can do.

But after all the basic tech could still be the same.

So let's move on to another attack.