TF-MAL-apk.gold_digger
📛 Threat Title
Malware family: GoldDigger
Description
ThreatFox malware family `apk.gold_digger`. Printable name: GoldDigger.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family . The page below gives you an overview on malware samples that MalwareBazaar has identified as GoldDigger .
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the GoldDigger malware family including references, samples and yara signatures.
-
web:thehackernews.com
GoldFactory spreads modified banking apps in Southeast Asia, causing 11,000+ malware infections through government impersonation scams.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.group-ib.com
GoldDigger is just one of numerous Android malware strains currently active in the Asia-Pacific region. Other noteworthy Android malware families currently targeting the region include the Gigabud family , SpyNote, HookBot, PWNDROID4, CraxsRAT, TgToxic, and Anubis (Godfather's predecessor), etc.
-
web:www.hkcert.org
Recently, the cybersecurity company Group-IB released a malware analysis report about a new malware called GoldDigger , which mainly targets Android and iOS devices of users in Vietnam and Thailand. The malware aims to collect sensitive information from victims, such as identity documents, text messages and facial recognition (Face ID) data.
-
web:www.infosecurity-magazine.com
Ther malware developers also use legitimate obfuscation tool Virbox Protector to make it harder for researchers to reverse engineer the Trojan, Group-IB said. "At the moment, GoldDigger is primarily focusing on targets in Vietnam.
-
web:www.pcrisk.com
What kind of malware is GoldDigger ? GoldDigger is an Android Trojan with a focus on financial institutions, having been operational since at least June 2023. This Trojan camouflages itself as a counterfeit Android app, capable of mimicking both a Vietnamese government portal and a local energy firm, all with the primary objective of pilfering banking credentials. GoldDigger in detail ...
-
web:www.scribd.com
The GoldDigger Trojan uses the Virbox Protector, a legitimate software, to substantially hinder static and dynamic analysis methods used for malware detection. This protector makes the Trojan difficult to analyze within sandbox and emulator environments, thereby evading detection from traditional security software and complicating the ...
-
web:www.techradar.com
The malware was being delivered via two separate apps - one impersonating a Vietnamese government portal, and another one impersonating an energy company.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.