GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

GoldFactory cybercriminal group has launched a new campaign targeting mobile users in Indonesia, Thailand, and Vietnam since October 2024. The attackers impersonate government services and distribute modified banking applications infected with Android malware. The campaign has resulted in over 11,000 infections across Southeast Asia. The malware-laden apps act as conduits for delivering malicious payloads to victims' devices. This represents an active, large-scale financial cybercrime operation targeting the banking sector in the region.