Breaking down Gigabud banking malware with Group-IB Fraud Matrix

Group-IB analyzed the Gigabud Android malware family, documenting a RAT variant that performs screen recording, accessibility-service abuse, keylogging and remote gestures to capture credentials and perform fraudulent transactions, and a fake-loan variant that harvests personal and banking data; the report details distribution via smishing and phishing websites across Thailand, Indonesia, Vietnam, the Philippines and Peru, notes hundreds of RAT samples and dozens of loan-scam samples, and provides detection and mitigation guidance for financial organizations and end users.