1. RCS POC – Infection Vectors Egypt June 18 th -19 st 2013 Mostapha Maanna – Marco Catino

2. RCS Infection Vectors By Infection Vector, we refer to any technique that can be used in order to deploy the RCS Agent on the target Device. Infection Vectors differ from Desktop to Mobile and can be local or remote: Local: physical access to the target device is needed Remote: infection can be accomplished even when the target device is in a remote location

3. Infection Vectors for Desktop Silent Installer Melted Application Offline Installation Local Exploit Microsoft Word Microsoft PowerPoint Remote Inject into Executable Files Inject into Web Pages Inject into YouTube Network Injector

4. Desktop Silent Installer Local

5. Desktop Melted Application Local

6. Desktop Offline Installation Local

7. Desktop Microsoft Word Exploit Remote

8. Desktop Tactical Network Injector Inject into Executable Files Inject into Web Pages Inject into YouTube

9. Infection Vectors for Mobile Local Installation Melted Application Local Wap Push Message Web Link / QR Code Remote Replace Android Apps Network Injector

10. Mobile Local Installation Local

11. Mobile Melted Application Local

12. Mobile WAP Push Message Remote

13. Mobile Web Link / QR Code Remote

14. Desktop Tactical Network Injector