Finance security news

The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions.

The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate space that Android typically reserves for employer apps, and what's inside it is kept separate from everything in the personal space. That

Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud

Social media ads for a free streaming service exposed roughly 570,000 people to StreamRat, a banking Trojan that can take control of infected phones.

The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk.

Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps