MOBILE FORENSICS

Android Trojans, banking malware and RATs

Due to their widespread use, Android devices are a common target for malware. In addition to traditional Trojans, banking malware and remote access Trojans (RATs) in particular play a significant role. An IT forensic investigation serves to objectively identify technical traces and evaluate them in a transparent manner.

Android Trojan
Banking malware
Remote Access Trojans (RATs)
Droppers and loaders
Adware and other potentially unwanted applications

TECHNICAL BACKGROUND

Technical Fundamentals

The most common categories include:

  • Android Trojan
  • Banking malware
  • Remote Access Trojans (RATs)
  • Droppers and loaders
  • Adware and other potentially unwanted applications

Depending on the data source, installed apps, permissions, configuration files, databases, logs, network artefacts and other system traces can be analysed.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
The starting point is a suitable forensic data backup. Relevant artefacts are then analysed using appropriate forensic tools and manual analysis. Notable findings are correlated with one another and assessed in terms of their technical significance. Automated hits are not accepted without verification, but are verified within the overall context.
2
LanCologne produces private expert reports for private individuals, companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, anonymised extracts from our client references can be provided.

TYPICAL QUESTIONS

When is this analysis required?

  • Are there any signs of malware?
  • Have any unusual permissions been granted?
  • Are there any suspicious communication patterns?
  • Can known Indicators of Compromise (IoCs) be detected?
  • What impact might the detected malware have had?

LIMITATIONS & CONCLUSION

What you should know

Not all malware leaves traces that can be used in the long term. Deleted data, encryption, operating system restrictions or previously unknown malware families can limit the ability to detect it. These limitations are documented transparently.

A thorough analysis of Android malware requires a combination of automated analysis and a manual forensic assessment of all relevant artefacts.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you suspect that your Android device has been infected with a Trojan or banking malware? LanCologne can help you with an objective IT forensic investigation and a clear assessment.

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Can banking malware always be detected?
No. Whether it can be detected depends on the available data and the malware itself.
What is a RAT?
A remote access Trojan enables attackers to gain remote access to a compromised device.
Are known IoCs checked?
Yes, provided they are suitable for the case in question.
Can deleted traces be found too?
Depending on the backup method and the specific circumstances, this may be possible in some cases.
Can an expert report be drawn up?
Yes, provided that this forms part of the contract.