I know there has been a lot of discussion on rooting on the internet and even on stack exchange.

What I want to ask here is not how rooting works - assuming the root exploit as a black box, what does the malware author really want to go after on an android device, once a root exploit is used successfully?

I ask in reference to the android architecture - what are their prime targets?

  • 4
    Anything that gives them a 5-finger discount. The overhead's so low. So, personal information, financial information, any account they can access for free while you pay for it, even the raw computing power of your device. Nov 1, 2015 at 20:37

1 Answer 1


Mobile malware is after the same thing as regular malware it's just on a different platform.

We use our phones to do everything from email, banking, social media, etc. Security tokens are stored in these devices for all kinds of different applications, and possibly web-sites. The average user doesn't take mobile security seriously. Try 3333 or 6666 on a friend's iPhone some time.

Access to email can give more than enough information to start taking over accounts, and could lead to identity theft. Even if they're not after your identity they can still just be the annoying malicious malware. Ransom-ware is becoming popular on Android. Maybe they just want to spam a bunch of ads through your apps.

Nowadays you need to treat your phone like you would your laptop/desktop because they've now become equivalent.

  • Another attack vector could be to automatically perform app-store purchases.
    – Philipp
    Dec 14, 2015 at 10:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .