GoldFactory exploits Android Work Profile to spread Gigabud banking trojan in Indonesia

The GoldFactory threat group is using Android's Work Profile feature to distribute the Gigabud Trojan, targeting Indonesian banking apps. A separate campaign by Mantax Otax is also active. The novel use of Work Profile for malware delivery increases stealth and persistence, posing a significant threat to financial institutions and users in Indonesia.