A new variant of the GoldPickaxe mobile banking Trojan is actively targeting users via malicious phishing infrastructure designed to trick them into downloading a compromised application. The threat underscores the insufficiency of conventional signature-based detection, requiring organizations to assess their mobile fleet for compromise. Immediate steps should include deploying behavioral Mobile Threat Defense (MTD) solutions capable of detecting such social engineering attacks.
Executive Summary The zLabs research team recently detected a new variant of the GoldPickaxe mobile banking Trojan actively targeting customer environments, which were identified and stopped by Zimperium's Mobile Threat Defense (MTD) platform. MTD triggered a high-severity alert when a user attempted to navigate to malicious phishing infrastructure to download the compromised application. Organizations that rely only on conventional signature-based detection should take immediate steps to identify whether attackers have compromised their mobile fleet.