GoldFactory is a threat actor known for advanced mobile banking trojans in the Asia-Pacific.
Analyst brief
GoldFactory is a threat actor group known for developing advanced mobile banking trojans, primarily targeting victims in the Asia-Pacific region, especially Vietnam and Thailand. They deploy malware such as GoldPickaxe and GoldDigger using social engineering tactics like smishing, phishing, and fake login screens to compromise devices and steal sensitive information. The group has close ties to the Gigabud malware family and demonstrates high operational maturity. Defenders should focus on a multi-faceted mobile security approach, enhancing mobile device monitoring for fake banking apps and educating users about these highly targeted social engineering campaigns.
GoldFactory
unknown
GoldFactory is a threat actor group attributed to developing sophisticated mobile banking malware targeting victims primarily in the Asia-Pacific region, specifically Vietnam and Thailand. They utilize social engineering to deliver malware to victims' devices and have close connections to the Gigabud malware family. GoldFactory's Trojans, such as GoldPickaxe and GoldDigger, employ tactics like smishing, phishing, and fake login screens to compromise victims' phones and steal sensitive information. Their evolving malware suite demonstrates a high level of operational maturity and ingenuity, requiring a proactive and multi-faceted cybersecurity approach to detect and mitigate their threats.