Let’s dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix

**GoldDigger** is an active Android banking Trojan (since June 2023) targeting financial organizations in Vietnam that disguises itself as legitimate apps, abuses Android Accessibility Service to harvest credentials, intercept SMS and perform remote actions, and uses Virbox Protector to hinder static/dynamic analysis; the report covers distribution (fake Google Play/corporate sites, likely smishing), TTPs, mitigation advice, and IOCs for defenders.