Ethical Camera Malware – Educational Project

Disclaimer
This project was developed strictly for academic and educational purposes as part of a Master's program in cybersecurity. It aims to demonstrate how unauthorized access to a device's camera can be achieved using common tools and programming techniques. The authors disclaim any responsibility for misuse. Do not run this code outside of isolated environments such as sandboxes or virtual machines.

Project Overview

This project simulates a stealth malware capable of activating a device's camera without the user's knowledge and streaming the video feed to a remote attacker. It includes persistence mechanisms to maintain control over the infected machine, data encryption to secure transmissions, and stealth techniques to avoid detection. The project serves as a technical demonstration of how malware can operate and how to protect against it.

Features

• Remote camera activation and live video streaming
• Socket-based bidirectional communication
• XOR encryption of transmitted video frames
• Serialization using pickle
• Frame capture and optimization using OpenCV
• Lightweight GUI using Tkinter for monitoring and control
• Steganography in images and videos for covert delivery
• Multiple persistence techniques:
  • Registry modification
  • Startup folder injection
  • Scheduled tasks
• Synchronization and self-repair mechanisms using mutexes

Delivery Methods

• Email-based delivery:
  • Malware embedded within media files (e.g., videos, images) using steganographic techniques.
  • Social engineering used to encourage the victim to open the infected file.
• USB-based delivery:
  • Infected USB device containing an autorun file and disguised executable.
  • Can be distributed physically or directly handed to the target.

Persistence Mechanisms

• Registry: Adds entries to launch the malware automatically at user login.
• Startup folder: Copies executable to the startup directory to ensure execution.
• Scheduled tasks: Executes the malware at fixed times daily from a hidden location.
• Self-repair: If one persistence method is removed, others restore it.

Technologies Used

Python Standard Libraries

• os, sys, shutil, socket, pickle, struct, threading, subprocess, tkinter, winreg

External Libraries

• opencv-python (cv2)
• Pillow
• pywin32: win32com.client, win32event, win32api, win32con

Protection Tools

• PyInstaller: Converts the Python script into a single executable, with options to hide the console window and add a custom icon.
• PyArmor: Obfuscates Python scripts and encrypts bytecode to hinder reverse engineering.

Security Awareness

This project highlights how attackers may use common tools and social engineering to deploy stealthy surveillance tools. It underscores the importance of:

• Being cautious with file downloads and email attachments
• Disabling autorun for USB devices
• Keeping antivirus and system protections up to date
• Educating users on phishing and malicious file indicators

License

This repository is intended for educational use only. Redistribution or use of this project for malicious purposes is strictly prohibited.