Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on securing apps from malware attack in project. I just want to know how app is repackaged with malware. Because for reverse engg. we've apktool, dex2jar, Java decompiler. But how intruders change code in java and then repackage it. Because I think it is not possible to get jar to dex. Please help.

share|improve this question

closed as not a real question by rook, Gilles, Terry Chia, AJ Henderson, Iszi Apr 9 '13 at 14:21

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

This question doesn't make sense. It's always possible to change the code. What do you mean by “not possible to get jar to dex”? – Gilles Apr 8 '13 at 0:52

There is a wealth of information on cracking android apps or more generally patching java bytecode. Adding malware to an app is a very similar process to removing some naive client side security check.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.