Download FinSpyMobile-4.00-User-Manual

FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
FINFISHER: FinSpy 3.10
User Manual
1
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
Copyright
2012 by Gamma Group International, UK
Date
2012-03-19
Release information
Version
Date
Author
Remarks
1.0
2011-12-15
AH
Initial version
1.1
2011-03-19
LH
Update for version 4.01
2
FinSpy / User Manual
FINUSB SUITE
3
SPECIFICATIONS
1
OVERVIEW
FinSpy is designed to help Law Enforcement and Intelligence Agencies to remotely monitor computer
systems and get full access to:

Online Communication: Skype, Messengers, VoIP, E-Mail, Browsing and more

Internet Activity: Discussion Boards, Blogs, File-Sharing and more

Stored Data: Remote access to hard-disk, deleted files, crypto containers and more

Surveillance Devices: Integrated webcams, microphones and more

Location: Trace computer system and monitor locations
FinSpy / User Manual
FINUSB SUITE
4
SPECIFICATIONS
2
FINSPY AGENT
2.1
FinSpy Agent – User Manual ......................................................................................................... 6
2.1.1
Quick Start and Overview ..................................................................................................... 6
2.1.2
Target List .............................................................................................................................. 8
2.1.2.1
Target List – Active .......................................................................................................... 11
2.1.2.2
Target List – Archived...................................................................................................... 12
2.1.2.3
Target List – Target Licensing .......................................................................................... 12
2.1.3
Analyse Data ....................................................................................................................... 15
2.1.4
Visualize Data ...................................................................................................................... 19
2.1.5
Target History...................................................................................................................... 21
2.1.6
Configuration ...................................................................................................................... 22
2.1.6.1
Configuration – General .................................................................................................. 24
2.1.6.2
Configuration – Tracking ................................................................................................. 30
2.1.6.3
Configuration – Add & Remove Module ......................................................................... 30
2.1.7
Emergency Configuration.................................................................................................... 32
2.1.8
Live Session ......................................................................................................................... 33
2.1.8.1
Live Session – Spy Calls ................................................................................................... 34
2.1.9
Evidence Protection ............................................................................................................ 35
2.1.10
Remove Data ....................................................................................................................... 37
2.1.11
Remove Infection ................................................................................................................ 38
2.1.12
Create Target ...................................................................................................................... 39
2.1.12.1
General ........................................................................................................................ 41
2.1.12.2
Network Configuration ............................................................................................... 42
2.1.12.3
Heartbeat Options....................................................................................................... 43
FinSpy / User Manual
FINUSB SUITE
5
SPECIFICATIONS
2.1.12.5
Self-Removal ............................................................................................................... 44
2.1.12.6
Select Modules ............................................................................................................ 45
2.1.12.7
Target Options ............................................................................................................ 45
2.1.12.8
User Permissions ......................................................................................................... 46
2.1.12.9
Summary ..................................................................................................................... 46
2.1.13
Tools .................................................................................................................................... 47
2.1.13.1
Tools – Deployment SMS ............................................................................................ 47
2.1.13.2
Tools – WAP Push........................................................................................................ 49
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
2.1 FinSpy Agent – User Manual
2.1.1 Quick Start and Overview
This chapter describes the handling and layout of FinSpy Agent user interface. To start
the FinSpy Agent there will be an icon on the Desktop which needs to be clicked and
which will start the main interface.
1. Username and password
2. Address and port of FinSpy Master to which the FinSpy Agent connects
This data will be remembered after the first successful login
3. Logoff from the FinSpy Master
6
FinSpy / User Manual
FINUSB SUITE
7
SPECIFICATIONS
After a successful login the main interface will open. It shows the main interface of the FinSpy Agent.
Name
Description
Data Analysis
Monitors and analyzes data of a selected FinSpy Target or all FinSpy Targets.
Create Target
It will open a wizard which guides easily through the creation of a FinSpy Target.
Deployment SMS
A PopUP will open to send out a SMS with the Mobile Trojan as a link.
WAP Push
To send out the Mobile Trojan via WAP Push message.
Configuration
Basic Settings for the FinSpy Agent and FinSpy Master can be defined.
Show Logfiles
Gives the possibility of viewing the FinSpy Master system logfiles.
Agent List
Information about FinSpy users, their user rights, logins and current connections.
FinSpy / User Manual
FINUSB SUITE
8
SPECIFICATIONS
License Information
Displays information regarding the license.
About
Shows the FinSpy Agent version and software agreement.
Online Help
Connects to online help on the Gamma Group homepage via internet.
2.1.2 Target List
The Target List contains all actions to manage data and FinSpy Infection of a FinSpy Target. All FinSpy
Targets are listed in two tables under the following categories:
The following information of infected FinSpy Targets is available:
Name
Description
Name
Name of FinSpy Installer Package (changeable after FinSpy Infection)
M (Data on Master)
New downloaded data available on FinSpy Master
T (Data on Target)
New data available on FinSpy Target (data is ready to download)
C (Configuration Pending)
The target configuration was changed but not pushed yet to the target
UID
FinSpy Target Unique Identifier
FinSpy / User Manual
FINUSB SUITE
9
SPECIFICATIONS
IMSI
International Mobile Subscriber Identity – Identification to the Mobile Network
Phone Number
Displays the Mobile Number of the infected Mobile Phone
Country
Country in which the FinSpy Target is located (detected by public IP)
City
City where the FinSpy Target is located (detected by public IP)
OS
Icon representing the Operating System running on the FinSpy Target mobile
Provider
To which Telecommunication Provider is the mobile phone connected
Base Station
Coordinates of the Base station the mobile phone is connected to
Last Heartbeat Time
When was the last time the mobile phone was connecting to the FinSpy
Master
IMEI
This is a unique identifier of each mobile phone
Model
Tries to identify the exact model of the used mobile phone
OS details
Displays the correct version number of the Operating system
Roaming
Is the mobile phone roaming
Roaming Host
The name of the Network which host the device while in roaming
Global IP
With which IP address is the Target connected to the Internet
Data link
The data link of the Target (Wifi, 3G, GPRS)
FinSpy / User Manual
FINUSB SUITE
10
SPECIFICATIONS
Wifi
If Wifi available on the Target
GPS coordinates
Last known GPS coordinates of the Target
Heartbeat Type
How did the Target connect to the FinSpy Master (SMS, TCP)
GPS Source
The source from where the polar coordinates were retrieved.
Version
The currently installed Trojan License
License
Displays the License ID of the Target
Active: List of FinSpy Targets currently infected
Archived: List of FinSpy Targets not infected anymore
Clicking on a specific target opens all possible actions. Available actions depend on the status of the
FinSpy Target (offline/online).
Right-Clicking on any column header allows the user to choose which columns shall be displayed.
FinSpy / User Manual
FINUSB SUITE
11
SPECIFICATIONS
2.1.2.1 Target List – Active
The possible actions of an online target are:
Name
Description
Analyse Data
Analyzes data which is already downloaded and available on the FinSpy Master
Visualize Data
Shows the recordings on a visual graph
Target History
Will display information about last known Target locations
Configuration
Management of the FinSpy Target
Emergency
Configuration
To configure the FinSpy Target via SMS in case it is not online
Live Session
Opens a live session to monitor a FinSpy Target live
Remove Infection
Removes the FinSpy Infection from the FinSpy Target
FinSpy / User Manual
FINUSB SUITE
12
SPECIFICATIONS
2.1.2.2 Target List – Archived
Possible actions for a FinSpy target, which is no longer infected. The recorded data is still persistent on
the FinSpy Master but the FinSpy target is not infected anymore.
Name
Description
Analyse Data
Analyzes data which is already downloaded and available on the FinSpy Master
Visualize Data
Shows the recordings on a visual graph
Target History
Will display information about last known Target locations
Remove Data
Removes the recorded data from the FinSpy Master
2.1.2.3 Target List – Target Licensing
The number of FinSpy Targets which can be monitored on the system is part of the license information
which is imported on the FinSpy Master during the installation.
After infection, the FinSpy Target has no associated license and all its collecting data features are
disabled. The FinSpy Master will allocate a license to the newly infected FinSpy Target, if available.
If there is no license available, the FinSpy Agent can still see the FinSpy Target in the Target List and can
only work limited with it until an existing infection is removed.
Previously gathered data can still be analyzed.
Once the license is installed on the FinSpy Target all the features become available and the user gains
full control over the FinSpy Target.
If all the licenses are used, the new infected FinSpy Targets will be shown as disabled until a new license
is available.
To free a license, an existing infection has to be removed from a licensed FinSpy Target. The infection
can be removed immediately from an online FinSpy Target or can be scheduled for removal from an
FinSpy / User Manual
FINUSB SUITE
13
SPECIFICATIONS
offline FinSpy Target. Either way the license will be freed immediately and allocated to an unlicensed
target.
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
2.1.2.3.1 Target List – Recorded Data Availability
A star (1) indicates, that there is new “Data on Master” available.
This means, new data was downloaded from the FinSpy Target to
FinSpy Master.
A bullet (2) indicates, there is new “Data on Target” available. This
means, there is new recorded data available on the FinSpy Target
(e.g. Keylogger recordings, Skype recordings, etc.) which is not
transferred to the FinSpy Master, yet.
2.1.2.3.2 Target List – Configuration Change Pending
A square (3) indicates that the target configuration was changed by
one or more agents but it was not pushed yet to the target.
The configuration will be push to the target when the target sends
a TCP heartbeat.
14
FinSpy / User Manual
FINUSB SUITE
15
SPECIFICATIONS
Analyze Data
Analyse Data gives the possibility of showing all the recorded data which was transferred to the FinSpy
Master. The recorded data can be viewed, deleted or exported. “Analyze Data” will show a list of all data
recorded of the selected FinSpy Target.
All the data of the selected FinSpy Target is displayed as a list. All new entries in the list are displayed
with bold characters. This indicates that the data was not processed yet. Once the data is viewed or
exported, the data will not be displayed in bold anymore.
FinSpy / User Manual
FINUSB SUITE
16
SPECIFICATIONS
Name
Description
Description
Identifies the module (device/application) of the recorded data set.
I (Importance)
An importance level can be associated to the collected evidence and can be used as
ordering criteria. To change the Importance Level, right click in the importance level
column of an evidence entry and a popup with all the available importance levels is
displayed.
Name
FinSpy Target Name
UID
Unique internal reference to the FinSpy Target
Size
Size of the data set in bytes
Acquired
The date when the data was recorded
Possible actions for the data entries can be shown and additional information are displayed.
Name
Description
Show
Opens the recorded data. In case of streaming data (video, sound) an external
player is opened.
Delete
Deletes the data set from the FinSpy Master.
Export
The data is exported to the FinSpy Agent computer. A folder will open where the
data is saved in and the downloaded file selected.
FinSpy / User Manual
FINUSB SUITE
17
SPECIFICATIONS
Comments
Opens a window where comments to the data can be stored. Every change of the
Importance Level is also logged as a comment.
Comments which are once done for a specific data cannot be edited or deleted. The Comments are
ordered by time in descending order which means, that the last introduced comment is displayed on
top.
FinSpy / User Manual
FINUSB SUITE
18
SPECIFICATIONS
There is also the possibility define the search by using filters:
The following filters are available:
Name
Description
Start – End Date
From which data to which date should be searched
Module
Module by which the data was recorded (e.g. Webcam, Microphone, Keylogger, ... )
Advanced Options
In case a specific module is selected, additional filters can be applied depending on
the module(e.g. All targets of a certain time zone)
FinSpy / User Manual
FINUSB SUITE
19
SPECIFICATIONS
2.1.3 Visualize Data
Visualize Data enables the FinSpy Agent to display recorded data in a graphical way.
A typical overview will look like the following:
1. The type of visualization. It will give two different graphs. It can be chosen between
a. Detailed view per day (default)
b. Detailed view per hour
2. The recorded data on that day. Each data is displayed with the amount of recordings for each
module per day.
3. The importance level can be set.
FinSpy / User Manual
FINUSB SUITE
20
SPECIFICATIONS
Detailed view per hour:
1. The overview is divided by modules.
2. Amount of recording per module is shown. Additionally the options “Change Importance”,
“Export Record” and “Remove Record” can be selected.
3. Meta-Information for each recording can be viewed if a recording is selected.
To navigate through date and time the mouse can be used, either via mouse-wheel (up/down) or by
dragging the scrollbar.
FinSpy / User Manual
FINUSB SUITE
21
SPECIFICATIONS
2.1.4 Target History
Target History gives the possibility of displaying the last known locations of the FinSpy Target.
The mobile target history contains information about all the target heartbeats including the time stamp
in UTC, the location information and the channel used to send the heartbeat information.
FinSpy / User Manual
FINUSB SUITE
22
SPECIFICATIONS
2.1.5 Configuration
To access the configuration of an infected FinSpy Target, the target needs to be selected and
“Configuration” clicked.
A new window opens within the FinSpy Agent. The following image illustrates the layout of the FinSpy
target configuration.
This Workspace is divided in two parts. The first part is on the left, which contains the modules and
different configuration options and the second is one the right, where module specific configuration
options can be set.
FinSpy / User Manual
FINUSB SUITE
23
SPECIFICATIONS
Configuration Options:

General
The following modules are available:
Module Name
Address Book
Logging Messages
Phone Call Logs
Phone Call Interception
Spy Calls
SMS Messages
Tracking
Blackberry Messenger
Module Icon
Available on the following OS:
FinSpy / User Manual
FINUSB SUITE
24
SPECIFICATIONS
2.1.5.1 Configuration – General
2.1.5.1.1 Infection Executable Information
This information is not changeable.




Infection Unique ID: An internal ID of the FinSpy Target Installer
Infection Name: Given name of the target
Infection Owner: Internal user ID of the user who generated the FinSpy Target
Max Infections: Maximum number of FinSpy Targets which can be infected by the device or
application
FinSpy / User Manual
FINUSB SUITE
25
SPECIFICATIONS
2.1.5.1.2 Infection Self-removal
Computers which never go online may become infected by mistake and spread an infected application
through an organization. To avoid keeping offline computers infected still recording data, the FinSpy
Target can remove itself.


Scheduled Removal: Date on which the FinSpy Target removes itself from the infected computer
Time Out Removal: Time after which the FinSpy Target removes itself from the infected
computer, if communication with the FinSpy Master fails (even if there is a functional internet
connection). This renewal will be disabled once the FinSpy Target contacts the FinSpy Master for
the first time.
2.1.5.1.3 Target Settings
Behaviour and identification of the FinSpy Target
Mobile Target Name: FinSpy Mobile Trojan may infect different targets. To separate the FinSpy Targets
the previous Target ID of the infected media can be changed
FinSpy / User Manual
FINUSB SUITE
26
SPECIFICATIONS
2.1.5.1.4 Time Based Heartbeat Options
Time Based Heartbeat options can be defined here. This means in which regular intervals will the
heartbeat take place.
Heartbeat Interval: The FinSpy target will send “alive” packets in a defined interval to the FinSpy Master.
This is used to update the online/offline status of the FinSpy Target and control certain events.
2.1.5.1.5 Event Based Heartbeat Options
Event based Heartbeat options control the behaviour of a heartbeat when certain events occur on the
mobile phone.











SIM Card Changed
MCC/MNC/CellID/LAC Changed
Cellular Network Changed
Incoming/Outgoing Phone Call
Wifi Connection Available
Data Link Available
Network Services Activated
Recorded Data Available
Location Changed
o 1 km to 250 km
Low Battery (Battery level drops below 10%)
Low Memory (Less than 10% storage space available)
FinSpy / User Manual
FINUSB SUITE
27
SPECIFICATIONS
2.1.5.1.6 Heartbeat Restrictions
This defines the communication channels which shall be used to send a heartbeat.



Wifi
3G
SMS
When the Roaming status becomes active and the exception “The device has Roaming status enabled” is
checked, the phone will send a last heartbeat with the new roaming status and will stop the heart
beating until the FinSpy Target is again in a non-roaming state.
2.1.5.1.7 Relay Network Settings
The settings of the network configuration between FinSpy Target and FinSpy Master are:

Relay IP Address(es): Pre-configured with connected FinSpy Master. This must be the external IP
or Hostname address of the FinSpy Master or of the FinSpy Relay. Several IP or hosts can be
defined. The infected computer will connect to one of the configured addresses

Relay Port(s): Pre-configured with settings retrieved by the FinSpy Master
FinSpy / User Manual
FINUSB SUITE
28
SPECIFICATIONS
2.1.5.1.8 Relay Cellular Configuration
This configuration contains the information about the Relays where the Mobile Targets make the TCP/IP
connection as well as the phone numbers where the SMS Heartbeats are sent to.
There must be at least one phone number installed. Otherwise the initial heartbeat cannot be sent. This
initial heartbeat is mandatory as this is the only possibility for the FinSpy Infrastructure to determine the
FinSpy Target Phone number.
The Phone numbers must be specified in the following format:
Syntax:
+<ContryCode><PhoneNumber>
Example:
+49170111111
FinSpy / User Manual
FINUSB SUITE
29
SPECIFICATIONS
2.1.5.1.9 Positioning Options
This section defines the positioning and locationing options.
Possible options are:




Last Known Position
Wifi Positioning System
Cell Site Triangulation
Active GPS Device
The order can be sorted with the arrow-up & arrow-down icons. It can also be configured that certain
methods will be disabled.
FinSpy / User Manual
30
FINUSB SUITE
SPECIFICATIONS
2.1.5.2 Configuration – Tracking
The sdfsdfsdf
2.1.5.3 Configuration – Add & Remove Module
To add & remove modules it is not required to create a new FinSpy Target Package. This can be done
easily through the Configuration dialog.
The modules will then immediately be removed from the FinSpy Target or immediately downloaded
from the FinSpy Master to the FinSpy Target if added.
Removing a module
Adding a module
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
31
FinSpy / User Manual
FINUSB SUITE
32
SPECIFICATIONS
2.1.6 Emergency Configuration
The Emergency Configuration gives the possibility to remotely configure a mobile phone in case it is not
actively coming online anymore or the FinSpy Master Phone number did change for any reason.
In this case the configuration can be changed via pushing out a SMS to the target.
The Emergency Configuration is slightly different from the normal Configuration. No Modules can be
added or changed. Furthermore the GUI is also slightly different as it will first of all give an overview of
the infection.
If any setting is changed and “Save” is selected the SMS will be sent out to the target.
FinSpy / User Manual
FINUSB SUITE
33
SPECIFICATIONS
2.1.7 Live Session
Available live access depends on the installed modules on the target. To establish a live session expand a
target and select “Live Session“.
All modules which are installed on the Target and furthermore allow a live session will be listed in a
dialogue:
Description
Name
Spy Calls
Directly activates the Microphone of the target phone and allows listening to it
Each Live Session is opened in a new tab inside the FinSpy Agent. After closing the live sessions, the
connection to the target computer can be ended by clicking “Disconnect” inside the expanded FinSpy
Target of tab Target List.
The following chapters describe live access of each module in more detail.
FinSpy / User Manual
FINUSB SUITE
34
SPECIFICATIONS
2.1.7.1 Live Session – Spy Calls
For a live-session of the FinSpy Target’s Display, Webcam or Microphone use the “Start” button inside
the FinSpy Agent. The quality of the recording depends on the predefined configuration.
To stop recording live images or microphone, move the mouse over the image and click the “Stop”
button
.
FinSpy / User Manual
FINUSB SUITE
35
SPECIFICATIONS
2.1.8 Evidence Protection
This feature helps protecting the collected evidence by using digital signatures and by logging the
actions taken to collect the evidence from a FinSpy Mobile Target.
To use the Evidence Protection, it can be selected via “Evidence Protection” on each FinSpy Mobile
Target.
The Evidence Protection Tab contains the following sections:
Name
Description
Evidence
All the collected evidence is listed and the user can check if the signature is valid.
Mobile History
A history of the FinSpy Mobile Target activity can be shown.
2.1.8.1 Evidence Protection – Evidence
The digital signature can be checked by clicking in the “Check now” (1) field. Upon a signature was
verified successfully, the field text will change to “Valid” (2). The signature can be checked for all the
collected evidence at a time or by selecting all the entries (Ctrl+A). Exporting of all or certain evidence is
FinSpy / User Manual
FINUSB SUITE
36
SPECIFICATIONS
possible (3). The folder where the evidence is exported will be opened in a Windows Explorer once the
downloaded is finished. A progress dialog will monitor the download of the evidence since this could be
a lengthy operation.
2.1.8.2 Evidence Protection – Target History
This gives an overview about historical information of a FinSpy Mobile Target such as:
Name
Description
Date
Timestamp with the FinSpy Master time represented in UTC.
Location Source
The method/device used to obtain the Target Location (in Polar Coordinates)
Basestation
Mobile Country Code/Mobile Network Code/Local Area Code/Cell ID
Coordinates
The Polar Coordinates of the Target Location. The position accuracy depends on the
Location Source value.
Country
In which country was the Target
City
In which city was the Target
FinSpy / User Manual
FINUSB SUITE
37
SPECIFICATIONS
2.1.9 Remove Data
Purging of data removes all data for the selected FinSpy Target from the FinSpy Master database.
To initiate purging of recorded data, expand the respective FinSpy Target in the tab “Target List” and
click on “Remove Data“.
FinSpy / User Manual
FINUSB SUITE
38
SPECIFICATIONS
2.1.10 Remove Infection
“Remove Infection” will irrepealably delete the Infection on the FinSpy Target and a further infection is
not possible without a restart of the FinSpy Target computer.
FinSpy / User Manual
FINUSB SUITE
39
SPECIFICATIONS
2.1.11 Create Target
A Target is an executable file or Office Document which includes all modules with which a FinSpy Target
can be monitored.
Click “Create Target” on the left navigation pane of the FinSpy Agent. This will open the Target Creation
Wizard.
Within the wizard, to navigate between the dialogs for configuration, “Next” or “Previous” buttons can
be used or clicking on the items on the left navigation pane is possible.
FinSpy / User Manual
FINUSB SUITE
40
SPECIFICATIONS
The following dialogs consist of:
Name
Description
General
Name and heartbeat of FinSpy Installer Package.
Network Options
Settings retrieved by the FinSpy Master.
Heartbeat Options
Criteria when the infection removes itself from the FinSpy Target.
Self-Removal
Options to define the removal of the FinSpy Trojan.
Select Modules
Defining which modules should be integrated with their settings.
Target Options
Advanced configuration of the behaviour of the FinSpy Trojan on the FinSpy
Target
User Permissions
Assigning users to the FinSpy Trojan
Summary
Infection Summary
FinSpy / User Manual
41
FINUSB SUITE
SPECIFICATIONS
2.1.11.1 General
General settings configure the behaviour and identification of a FinSpy Installer Package. Some
parameters are changeable after infection of a FinSpy Target.
The Operating System of the Target has to be chosen. This will result in a different FinSpy Trojan with
different modules.
Currently supported are the following Operating Systems:
The following Mobile Operating Systems are supported:
Mobile Operating System
OS Icon
Version
Android
2.x
Blackberry
4.6
5.x
6.x
7.x
Windows Mobile
6.1
6.5
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
2.1.11.2 Network Configuration
These settings are explained in chapter: Relay Network Settings & Relay Cellular Configuration.
42
FinSpy / User Manual
FINUSB SUITE
43
SPECIFICATIONS
2.1.11.3 Heartbeat Options
These settings are explained in chapter: Time Based Heartbeat Configuration, Event Based Heartbeat
Configuration & Heartbeat Restrictions.
FinSpy / User Manual
FINUSB SUITE
44
SPECIFICATIONS
2.1.11.5 Self-Removal
“Infection Limit” defines the amount of maximum infections per Trojan. If “Max Infections” is set to “3”,
then only the first 3 Trojans heart beating to the FinSpy Master will be accepted.
“Infection Self-Removal” is explained in chapter: Infection Self-removal.
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
2.1.11.6 Select Modules
Check the boxes of respective necessary modules.
For detailed description how to configure each Module see the following chapters:

Configuration – Tracking
2.1.11.7 Target Options
Different Installer options can be defined.

For detailed description see the following chapter: Positioning Options
45
FinSpy / User Manual
FINUSB SUITE
46
SPECIFICATIONS
2.1.11.8 User Permissions
Each creation of a FinSpy Trojan allows assigning users to work with it. Multiple users can be chosen (1).
Furthermore it is possible to give special rights to each user like establishing a Live Session or configuring
the FinSpy Target (2).
2.1.11.9 Summary
A Summary of the generated infection can be reviewed. Listed is the name of the infection, some
configuration settings and all chosen modules.
FinSpy / User Manual
FINUSB SUITE
47
SPECIFICATIONS
2.1.12 Tools
On the left side of the FinSpy Agent can be two configuration options be found which are meant for
Deployment of the Trojan. Currently two possible in-built deployment methods are given.
2.1.12.1 Tools – Deployment SMS
To send a SMS to the Target the in-built Deployment SMS can be used.
The Deployment SMS basically consists of two parts:


Target Mobile Number
Text
FinSpy / User Manual
FINUSB SUITE
48
SPECIFICATIONS
The Target Mobile Number must be in the format which contains the country code and the regular
phone number.
The Target Mobile phone might display the message like this:
The Text cannot be more than 140 Characters as this is a protocol limitation of SMS and should contain a
link to the uploaded FinSpy Mobile Trojan. The Trojan must be uploaded to some web space where the
Target can download it from.
FinSpy / User Manual
FINUSB SUITE
49
SPECIFICATIONS
2.1.12.2 Tools – WAP Push
WAP Push SMS are so called Flash SMS or Class-0 SMS. These SMS directly flash onto the screen of the
mobile phone and the Target doesn’t need to open the SMS application or similar.
Example:
FinSpy / User Manual
FINUSB SUITE
50
SPECIFICATIONS
3
SUPPORT
All customers have access to an after-sales website that gives the customers the following capabilities:

Download product information (Latest user manuals, specifications, training slides)

Access change-log and roadmap for products

Report bugs and submit feature requests

Inspect frequently asked questions (FAQ)
The after-sales website can be found at

https://www.gamma-international.de
o
Username:
o
Password:
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
51
FinSpy / User Manual
FINUSB SUITE
SPECIFICATIONS
52