Hackers observed injecting legitimate banking apps with malicious code

Trojan.

• Group-IB links poisoned mobile banking apps to GoldFactory
• Attackers decompile legitimate apps, add trojans/backdoors, and spread them via phishing lures and fake sites
• Advanced malware families enable full device takeover, exposing tens of thousands to banking fraud

Hackers are tricking people into downloading poisoned mobile banking apps, stealing their login credentials, monitoring their activity, and in many cases - enabling financial fraud.