Indonesia Hit by Android Banking App-Cloning Campaign

Summary

The GoldFactory threat group has been observed exploiting the Android Work Profile feature to deliver the Gigabud Trojan, a banking trojan. Concurrently, a separate campaign is spreading the Mantax Otax malware, indicating a broader threat landscape targeting Android users in Indonesia. Both malware strains are designed to steal financial information.

Indicators of Compromise

• malware — Gigabud Trojan
• malware — Mantax Otax

Entities