As cited
Copy frozen at (site build).
threat intel
Indonesia Hit by Android Banking App-Cloning Campaign
Two threat groups are distributing malware targeting Android users in Indonesia. GoldFactory deploys the Gigabud Trojan by exploiting Android Work Profile functionality, while a separate campaign spreads Mantax Otax to clone banking applications.
Why it matters: Indonesian mobile banking users and financial institutions face account compromise and credential theft; practitioners should monitor for Android Work Profile abuse and alert customers to suspicious app installations and permission requests.
- Source published
- First seen by Cybersecurity Tracker