GoldDigger Trojan Can Steal Sensitive Data from iOS Users
Introduction
Apple continuously updates its operating systems with security patches to safeguard its users. However, as with any technology, hackers find ways to exploit vulnerabilities. Recently, a new trojan called GoldDigger has emerged, targeting iOS users and posing a significant threat to their banking information.
The GoldDigger Trojan
Cybersecurity firm Group-IB has reported the existence of the GoldDigger trojan for iOS users. Originally designed for Android, hackers successfully adapted it to attack iPhone and iPad users. This trojan is believed to be the first of its kind for iOS and demonstrates the extent of hackers’ evolving tactics.
The GoldDigger trojan is particularly dangerous as it collects sensitive data such as facial recognition data, ID documents, and SMS messages. With this information, hackers can create deepfakes and gain unauthorized access to victims’ bank accounts, leaving victims unknowingly vulnerable to financial loss.
Methods of Distribution
Initially, GoldDigger was distributed through Apple’s TestFlight, a platform that allows developers to release beta versions of their apps. However, Apple promptly removed it from TestFlight. Undeterred, hackers adopted a more sophisticated approach using a Mobile Device Management (MDM) profile. This deceptive profile convinces users to install the malicious profile, allowing hackers to collect the necessary data.
Potential Targets
While the trojan predominantly targets users in Vietnam and Thailand, it has the potential to compromise users in other regions too. Group-IB has described the trojan as being in an “active stage of evolution,” posing an ongoing threat to iOS users worldwide.
Protecting Yourself
Currently, it appears that even the latest iOS and iPadOS versions remain vulnerable to the GoldDigger trojan. However, Group-IB has informed Apple about the trojan, and it is likely that the company is actively working on a fix. In the meantime, to avoid falling victim to attacks like GoldDigger, it is crucial to only install apps from trusted sources.
To learn more about the GoldDigger trojan and its specific details, please visit here.
Image source: Unsplash
