http://blog.squareroots.de/en/2016/05/google-ctf-2016-ill-intentions-mobile/

Original writeup (http://blog.squareroots.de/en/2016/05/google-ctf-2016-ill-intentions-mobile/).