A professional Android ransomware simulation that masquerades as a standard calculator to test user awareness on modern mobile devices.
Built specifically for the Android ecosystem, this tool appears to the user as a fully functional, innocent calculator. Once executed, it demonstrates how easily untrusted applications can target sensitive user storage while leaving the system operational.
[APP] Calculator Pro Internal Activity Started
[INFO] Requesting MANAGE_EXTERNAL_STORAGE... [GRANTED]
[INFO] Scanning /sdcard/DCIM/Camera... [422 items found]
[SIM] Deleting: IMG_20240313_142.jpg...
[SIM] Deleting: VIDEO_VAULT_01.mp4...
[INFO] Operating System Integrity: SECURE (100%)
[NOTIFICATION] Security Awareness Alert Triggered
[FINISH] Simulation results logged to researcher dashboard.
Demonstrates how malicious apps hide their entry points behind common utility features to bypass initial inspection.
Identify if a user would realistically grant the invasive permissions required for this simulation to succeed.
Triggers a full-screen educational warning immediately after the simulated action to maximize user impact.
Recursively crawls the internal storage for specific file extensions (.jpg, .png, .mp4, .pdf) while ignoring system directories (/system, /data/app).
Implements Scoped Storage bypasses and Media Store API calls to demonstrate how modern Android security layers are navigated.
A complete, functional calculator implementation that handles real math—ensuring the user doesn't uninstall the app immediately.
| Android Support | API 31 to API 35 (Android 12-15) |
| Infection Vector | Social Engineering / Unknown Sources Sidelining |
| File Targets | Images, Videos, Documents, Archives |
| Simulation Type | Non-Destructive Mock Deletion (Security Audit) |
| Development | Java / Kotlin (Native Android SDK) |
Simulates a user sideloading the "Calculator" from an unofficial website.
The user is prompted for storage permissions under the guise of "File Calculation".
The scavenger logic begins simulating the deletion of user photos and videos.
A comprehensive warning is displayed, explaining the risk of sideloading.