Static vs Dynamic Malware Analysis

The video tutorial discusses malware analysis, focusing on static and dynamic methods. Static analysis involves examining APK files without executing them, while dynamic analysis observes app behavior in a controlled environment. The tutorial also covers malware distribution methods, including App Store uploads, phishing, compromised websites, and OS images. It highlights the risks of compromised source code and the potential for exploits in software. Finally, it addresses the dangers of losing physical control of devices, which can lead to unauthorized installations.

What are the two main types of analysis used to evaluate mobile applications for malicious behavior?

Explain the purpose of static analysis in the context of mobile malware.

What are the risks associated with dynamic analysis when evaluating mobile applications?

Describe how Trojans can be distributed through app stores.

What is the significance of compromised websites in the distribution of mobile malware?

How can legitimate applications be Trojanized without the original developers' knowledge?

What scenarios might allow a malicious actor to exploit a device when it is not in the possession of the user?