GOLDFACTORY HITS SOUTHEAST ASIA WITH MODIFIED BANKING APPS DRIVING 11,000+ INFECTIONS

Summary from the TLDR InfoSec newsletter

GoldFactory is a cybercrime group targeting Android users in Indonesia, Thailand, and Vietnam with tampered banking apps that still appear legitimate while secretly installing remote-access malware. The malware abuses accessibility services and hooking frameworks to bypass security checks, hide its presence, control devices in real time, and steal banking data at scale. At least 11,000 infections have been identified so far.