GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
Source Reddit InfoSec News
Description
GoldFactory is a malware campaign targeting Southeast Asia through modified banking applications, resulting in over 11,000 infections. The threat involves distributing trojanized versions of legitimate banking apps to steal credentials and potentially conduct fraudulent transactions. While primarily focused on Southeast Asia, the campaign poses risks to European organizations with ties to affected banks or users who might download compromised apps. The malware’s high infection count and use of trusted banking apps increase its potential impact. No CVSS score is available, but the threat is assessed as high severity due to its broad impact on confidentiality and financial integrity. Mitigation requires enhanced app vetting, user awareness, and network monitoring for suspicious banking app activity. European countries with significant banking and financial sectors and close economic ties to Southeast Asia are more likely to be affected. Immediate attention to app source verification and endpoint protection is critical to prevent spread and data theft.