News

In the past six months, the landscape of Android financial threats has seen significant changes. ESET researchers have identified new threats like GoldPickaxe, capable of stealing facial recognition data for deepfake video creation, targeting victims in Southeast Asia. Another variant, GoldDiggerPlus, has been found targeting users in Latin America and South Africa. Infostealing malware is now impersonating generative AI tools, with Rilide Stealer and Vidar infostealer exploiting the popularity of AI assistants and image generators. Gaming enthusiasts face risks from infostealer malware hidden in cracked games and cheating tools. RedLine Stealer has shown a resurgence despite its development ceasing in 2023, with significant detection spikes in H1 2024. The Balada Injector gang continues to exploit WordPress plugin vulnerabilities, while LockBit ransomware’s prominence has been challenged by Operation Chronos. The Ebury botnet, active since 2009, remains a threat with expanded functionalities focusing on monetization through cryptocurrency and credit card theft.