THREAT OPS › Threat News › Android malware creates a hidden copy of your banking app
Android malware creates a hidden copy of your banking app
<p class="wp-block-paragraph">Researchers at <a href="https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/" rel="noreferrer noopener nofollow" target="_blank">Group-IB found</a> that the Android banking Trojan Gigabud can create a separate work profile on an infected phone and run a cloned banking app inside it. The attacker can then carry out fraudulent transactions in the new pro
MITRE ATT&CK techniques
Indicators of compromise
- https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/url
- https://f-droid.org/en/packages/net.typeblog.shelter/url