GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

GoldFactory cybercriminal group is conducting active attacks targeting mobile users in Indonesia, Thailand, and Vietnam since October 2024. The campaign involves distributing modified banking applications that serve as conduits for Android malware. Attackers are impersonating government services to trick users into installing malicious apps. The operation has resulted in over 11,000 infections across Southeast Asia. This represents an ongoing financial threat targeting mobile banking users in the region.