TLDR InfoSec · STRATEGIES & TACTICS

KONFETY RETURNS: CLASSIC MOBILE THREAT WITH NEW EVASION TECHNIQUES

zimperium.com5 min read

Summary from the TLDR InfoSec newsletter

Android malware "Konfety" employs sophisticated evasion tactics, including dual-app deception (same package name for benign and malicious versions), ZIP-level tampering to break analysis tools, dynamic code loading with encrypted assets, stealth techniques such as icon hiding, and the use of the CaramelAds SDK for ad fraud.