aiqbench analysis
This article details a sophisticated Android malware campaign where attackers clone banking apps into isolated work profiles to bypass device-level fraud detection mechanisms. The primary focus is on the technical exploitation of Android's profile isolation features and the specific behavior of the Gigabud trojan and Vwork cloner tools within an AI-driven threat landscape.
Hackers Clone Banking Apps Into Hidden Android Work Profiles to Evade Fraud Detection
Android banking fraud is entering a deceptive phase. Attackers are using malware that copies targeted banking apps into a concealed Android work profile, separating a fraudulent session from warning signs seen on the phone. The operation begins with Gigabud, an Android remote-access trojan active since 2022. Victims are lured through phishing sites, messaging apps, or […] The post Hackers Clone Banking Apps Into Hidden Android Work Profiles to Evade Fraud Detection appeared first on Cyber Security News.
Android banking fraud is entering a deceptive phase. Attackers are using malware that copies targeted banking apps into a concealed Android work profile, separating a fraudulent session from warning signs seen on the phone. The operation begins with Gigabud, an Android remote-access trojan active since 2022. Victims are lured through phishing sites, messaging apps, or social-media posts into sideloading fake airline, tax, or government applications, while fake banking app downloads can turn…
Excerpt shown under the publisher's RSS terms · 72 words · full text and figures are on the publisher's site
Related coverage
New StreamRAT Android Trojan Gives Hackers Full Remote Control Through VNC and Accessibility
Cybersecurity News · Sep 3, 2026
Use Google Messages? I change these 9 settings on every new Android phone - here's why
ZDNet · Jun 15, 2026
Hackers Use Rokarolla Android Malware to Disable Google Play Protect and Control Devices
Cybersecurity News · Jun 17, 2026
Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
Cybersecurity News · Oct 16, 2026