Analyzing Mobile Malware Safely

About this course

This course teaches the defensive analysis of malicious mobile apps, the way a threat-intel or SOC analyst works. You start with safe handling on an isolated device, then learn the malware families: banking overlays, spyware, SMS fraud, droppers and RATs. You triage an unknown Android APK, recognise dropper and loader patterns, and locate command-and-control through static views of the manifest, DEX and strings, writing simple YARA fingerprints. Dynamic analysis shows runtime behaviour and emulator-evasion, and you extract network IOCs such as domains and TLS fingerprints. You also cover iOS configuration-profile abuse, common de-obfuscation concepts and how to write a clear analysis report. Each lesson has a challenge and a quiz, with a final exam and certificate. For authorised, legal study only.