Indonesia Hit by Android Banking App-Cloning Campaign
BLUF
GoldFactory and Mantax Otax are actively deploying banking trojans in Indonesia using advanced Android cloning techniques.
NEWS
The GoldFactory group leverages the Android Work Profile feature to distribute the Gigabud Trojan, while a separate campaign utilizes Mantax Otax malware. Both campaigns focus on cloning popular banking applications to deceive users into installing malicious software.
Why I Care
This campaign poses a direct financial risk to Indonesian mobile banking customers and highlights evolving mobile threat vectors that bypass traditional security controls.
Next Steps
Mobile device management administrators should audit Work Profile configurations immediately, while users must verify app sources before installation and enable Play Protect scanning.
Source: Dark Reading ·