DANGER! iOS users are in the crosshairs of new malware

In recent months, a new threat has been keeping Apple users up at night: a malware which steals banking data through facial recognition and SMS interception.

This is the GoldPickaxea variation of GoldDigger, which has been reaching Android users for some time.

What is GoldPickaxe?

According to a report from Group-IB, GoldPickaxe is a sophisticated trojan that was discovered in October 2022 and primarily targets users of Apple’s operating system, the iOS.

The malware collects facial recognition data, identity documents and intercepts text messages (SMS) to gain access to victims’ banking details.

The technique consists of using images captured from infected devices to create deepfakes, through a face swap service based on artificial intelligence.

The acquired information is then combined with intercepted messages to access bank accounts.

How does malware spread?

Virus with artificial intelligence threatens banking data on iPhones – Image: Reproduction

The method of propagation of GoldPickaxe has been through a testing platform from Appleknown as ‘TestFlight’.

This platform is used by developers to test new apps before they are released on the App Store, which makes it easier for cybercriminals to distribute malware.

To date, attacks have focused on the Asia and Pacific region. However, it is possible that the threat will spread to other regions soon.

How to protect yourself?

The main recommendation to protect yourself from GoldPickaxe is to avoid installing applications via TestFlight.

Furthermore, it is essential to always keep the operating system and applications updated to the latest versions, as these updates often contain security fixes.

For Android users, the threat is also real. GoldDigger, which is the ‘brother’ of GoldPickaxe, has already managed to reach a greater number of users in this system and is considered even more dangerous.

Finally, it is worth remembering that a good security practice is to have a reliable antivirus application installed on the device and perform regular checks to detect the presence of malware.

Furthermore, it is always good to keep a backup of data to avoid loss in the event of an attack. And there? Did you understand better about this threat and how to protect yourself?

Let us know in the comments and share with your friends to keep them safe too!