iPhones vs Android Phones: New Banking Trojan Poses Threat to iOS Users

Many people choose iPhones over Android phones because they believe iPhones are more secure. However, a new banking trojan has been discovered, specifically targeting iPhone and iPad users.

According to a detailed report by the cybersecurity company Group-IB, the Android trojan GoldDigger has been adapted to attack iOS devices. This trojan is designed to gather facial recognition data, ID documents, and even intercept SMS messages from iPhone and iPad users.

The new version of the trojan, called GoldPickaxe, is now tailored for both Android and iOS devices. Once it infects an iPhone or Android phone, it can collect sensitive data such as facial recognition and ID documents. Additionally, this biometric data is used to create AI deepfakes, allowing attackers to impersonate victims and gain access to their bank accounts.

Initially discovered in Vietnam and Thailand, the GoldPickaxe trojan may expand its reach to target iPhone and Android users globally if it proves successful.

Android banking trojans are commonly spread through dubious apps and phishing schemes. While it’s more challenging to infect an iPhone due to Apple’s closed ecosystem, hackers have found a way by using a Mobile Device Management (MDM) profile typically used for managing enterprise devices.

Group-IB has identified a lone threat actor known as GoldFactory behind the creation of both versions of the GoldPickaxe banking trojan. Furthermore, a new variant called GoldDiggerPlus has been discovered that allows hackers to make real-time calls on infected devices.

Given the potential profitability of targeting iPhones with banking trojans like GoldDigger or GoldPickaxe, this may not be the last we hear about this malware or the hackers behind it.

As of now, even the most recent versions of iOS and iPadOS appear susceptible to this trojan. Group-IB has notified Apple about the issue, so it’s likely that the company is already working on developing a fix.

How to Keep Your iPhone Safe?

To protect your iPhone from malware threats like GoldPickaxe:

Stick to trusted app sources: Avoid installing apps from sources you don’t trust.
Avoid TestFlight: Don’t install apps through TestFlight as it isn’t vetted like the App Store.
Keep your device updated: Install all latest software updates released by Apple.
Practice good cyber hygiene: Be cautious and avoid unnecessary risks while using your device.
By following these steps, you can help protect yourself and your iPhone from hackers and malware threats.