Indonesia Hit by Android Banking App-Cloning Campaign

A threat group known as GoldFactory is targeting Android devices in Indonesia with a campaign that clones banking apps. The group uses the Android Work Profile feature to deliver malware, specifically the Gigabud Trojan. Meanwhile, another malware strain called Mantax Otax is being spread separately. These campaigns appear to be focused on compromising Android banking apps in the region. The GoldFactory group's tactics involve exploiting a legitimate Android feature to infect devices with the Gigabud Trojan.