Android security. We think we're protected. Or consider how we download mobile apps, putting our faith in the (often absent) vetting process of the Google Play Store. The reality is that we’re riding on a fool’s paradise. Sophisticated packers such as Ducex are running amok and the Android ecosystem has...

A high-end packer, Ducex, is now used to pack the Triada trojan. It’s been one of the most sophisticated Android malware threats since 2016. Though Ducex itself is not particularly malicious, its design is clearly oriented around detection evasion and increasing reverse engineering difficulty. Our researchers have discovered Ducex inside...