The Invisible Checkpoint: Passive LTE Traffic Capture for Mobile Malware Detection

This paper presents a privacy-preserving, field-deployable framework for passive mobile malware detection that uses an LTE-connected laptop with a controlled Wi-Fi hotspot, migrating the passive-inspection model of TinyCheck and SpyGuard from resource-constrained hardware to a scalable platform running Suricata and Zeek.