Android Service Security: Victimized Android Device by Transferring Malicious Service via Near Field Communication Using Social Engineering

ABSTRACT: The purpose of this thesis is to investigate on vulnerabilities of the Android operating system and security breaches which would be harmful and could be misused for destructive purposes. In this thesis the whole idea of social engineering would be investigated and the relevance of implemented system would be explained. The implemented system includes client and server architecture which allows attacker to spy on the device’s owner as a target and obtain full access of target device remotely. Example can be listed as listening to his or her voice calls, checking his or her messages, finding victim’s location, accessing to all stored files and checking victim’s call logs. The system would make the attacker able to get a kind of remote access from the target device. This system is implemented for spying on Android operating system and shows that how legitimated application can be turned to malicious software by adding services. The main benefit of this service is that service will run on the background of target’s device and stick to device even target’s device is restarted. The interface of this malicious application can be changed easily based on information that attacker is gathered from victim’ interest. Transferring this malicious application to Android device can be done by using Near Field Communication (NFC). This application has been implemented on Eclipse environment and coded with Java programming language. Keywords: Android, Malicious service, Security breach, Near Field Communication, Social Engineering, Hacking. …………………………………………………………………………………………………………………………