Cybercriminals use malware to obtain face biometrics, break into banking apps

Chinese cybercrime group GoldFactory is creating malware to attack Android and iOS that steals face biometrics and uses them to break into bank accounts of the victim, according to The Register.

The group started releasing trojanized smartphone apps in June 2023. The first version, GoldDigger, focused on getting banking credentials. The latest version, GoldPickaxe or GoldPickaxe.iOS for Android and iOS, first appeared in October of that same year. It captures data used for identity verification, including face biometrics.

Bleeping …

accounts android apps attack bank banking biometrics biometrics news chinese cybercrime cybercriminals cybersecurity deepfakes face biometrics financial services golddigger ios june june 2023 malware mobile biometrics register smartphone the register version victim