An Evolutionary Perspective: A Study of Anubis Android Banking Trojan

Anubis Android banking trojan has been widespread worldwide which caused millions of economy loss while it has been evolving both numerically and swiftly. To chase with the cutting-edge anti-malware countermeasures adopted by cyber-security businesses, malware authors have developed more complex techniques: high-level obfuscation, virtual environment recognition, conditional execution (logic bomb), run-time payload dropping, etc. In this paper, we have traced evolution and diversification of an Anubis malware family and conduct a series of evaluation of different versions in patterns.