GoldPickaxe Trojan steals your face!

Researchers have identified a mobile Trojan family called GoldPickaxe (Android/iOS) used in phishing/smishing campaigns that coerce victims into installing malicious apps or a disguised MDM profile and submitting ID photos and face scans; attackers then leverage AI face-swapping to impersonate victims for potential bank fraud, with activity attributed to a financially motivated group active in Thailand and detections reported by Malwarebytes.