BTC $55865.7639
ETH $3222.4858
BNB $400.6682
SOL $110.6842
XRP $0.5548
ADA $0.6230
AVAX $39.2767
DOGE $0.0896
TRX $0.1404
wstETH $3751.1765
LINK $19.0474
DOT $8.0594
WETH $3236.9354
MATIC $1.0625
UNI $10.5983
WBTC $55965.3668
IMX $3.3901
ICP $13.0143
BCH $300.6764
LTC $74.8911
CAKE $3.2355
FIL $8.1517
ETC $28.1561
RNDR $7.4096
KAS $0.1718
DAI $0.9979
HBAR $0.1117
ATOM $11.3293
VET $0.0491
INJ $36.5642
TON $2.1072
OKB $51.3395
LDO $3.5443
FDUSD $1.0015
STX $3.0723
ARB $1.9162
NEAR $4.0168
XMR $131.7677
TIA $17.0755
XLM $0.1186
GRT $0.2823
ENS $22.2643
THETA $2.1117
MKR $2155.4331
WEMIX $2.1023
APEX $2.4575
BEAM $0.0357
BTC $55865.7639
ETH $3222.4858
BNB $400.6682
SOL $110.6842
XRP $0.5548
ADA $0.6230
AVAX $39.2767
DOGE $0.0896
TRX $0.1404
wstETH $3751.1765
LINK $19.0474
DOT $8.0594
WETH $3236.9354
MATIC $1.0625
UNI $10.5983
WBTC $55965.3668
IMX $3.3901
ICP $13.0143
BCH $300.6764
LTC $74.8911
CAKE $3.2355
FIL $8.1517
ETC $28.1561
RNDR $7.4096
KAS $0.1718
DAI $0.9979
HBAR $0.1117
ATOM $11.3293
VET $0.0491
INJ $36.5642
TON $2.1072
OKB $51.3395
LDO $3.5443
FDUSD $1.0015
STX $3.0723
ARB $1.9162
NEAR $4.0168
XMR $131.7677
TIA $17.0755
XLM $0.1186
GRT $0.2823
ENS $22.2643
THETA $2.1117
MKR $2155.4331
WEMIX $2.1023
APEX $2.4575
BEAM $0.0357
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Android Trojan “GoldDigger” is rapidly emptying the wallets of Vietnamese users

    No SMS can evade a sophisticated digital thief.

     

    "GoldDigger" is the name of a new Android Trojan that targets banking apps, according to security researchers. Its objective is to attack financial applications in order to steal money from victims and give infected devices remote access.

    The malware targets more than 50 Vietnamese banks, electronic wallets, and cryptocurrency wallets, as Group-IB pointed out. Additionally, there are rumors that the Trojan could spread to Spanish-speaking nations and a larger portion of the Asia-Pacific region.

    Although there is good evidence to suggest that the Trojan has been active since June, it wasn't discovered until August 2023. Researchers gave it the name "GoldDigger" in honor of a particular "GoldActivity" activity they discovered in the APK file they were analyzing.

    The malicious apps have been found to impersonate a Vietnamese government portal and an energy company, asking for a variety of permissions to fulfill their data collection objectives even though the exact scope of the infection is currently unknown.

    Like a lot of other Android malware, the detected GoldDigger instances take advantage of system accessibility services to extend their privileges on the infected device. The Trojan gives attackers access to targeted financial applications, allowing them to interact with them, extract data from them—including credentials—intercept SMS messages, and carry out other nefarious tasks.

    Giving malware access also enables it to fully monitor user activity, view bank account balances, log keystrokes, capture two-factor authentication (2FA) codes, and enable remote device access.

    The attack vectors used to spread "GoldDigger" include fake corporate websites in Vietnam and false websites masquerading as official Google Play Store pages.

    One of the many Trojans that have surfaced recently that target Android banking apps is GoldDigger. In the report, Group-IB emphasized that GoldDigger employs a unique advanced protection mechanism using the software program Virbox Protector, allowing the Trojan to avoid detection and posing challenges for malware analysis.

    Malicious programs aimed at stealing user funds pose a serious threat to financial security. To avoid being scammed, it is important to be careful when installing any applications, paying particular attention to the permissions given. Vigilance and prudence are the key to keeping your finances safe.

    Author reign3d
    Webwyrm network: how Chinese scammers robbed thousands of unemployed people
    How to Create a Temporary Mailbox: Protecting Your Online Privacy

    Comments 0

    Add comment