2024-03-13 19:31:33
Security company Group-IB has discovered a new Trojan for iOS, called GoldPickaxe.iOS. It is capable of stealing facial recognition data, ID cards, SMS and other information that can be used to hack victims’ bank accounts.
As Day.Az reports with reference to Gazeta.ru, this was reported by the Tom’s Hardware portal.
It is noted that the Trojan belongs to the GoldDigger family, which was originally developed for Android. GoldPickaxe.iOS was initially distributed through the TestFlight service, where beta versions of applications are tested before they hit the App Store. Shortly after the application was removed from the Apple service, scammers began distributing it through an MDM profile, which is used to manage and configure corporate devices.
Now scammers are persuading users to install a malicious profile that allows them to download a Trojan bypassing the App Store. After this, the attackers gain access to all the victims’ data.
According to Group-IB, the majority of victims of the Trojan are in Vietnam and Thailand, but users from other countries may also be affected. Experts have already informed Apple about the identified problem.