Android malware creates a hidden copy of your banking app

The report details Gigabud, an Android banking Trojan that sideloads via fake apps and uses a malicious Shelter fork (Vwork) to create a work profile, clone targeted banking apps, and execute fraudulent transactions from the cloned profile — potentially evading anti-fraud and in-app malware detection. It describes infection mechanics (phishing, permission abuse, overlays), indicators detected by Malwarebytes, and mitigation advice (avoid sideloading, revoke permissions, use up-to-date mobile security, contact banks).