Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks Swati KhandelwalSep 10, 2026Malware / Mobile Security The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate space that Android typically reserves for employer apps, and what's inside it is kept separate from everything in the personal space. That split hides the trojan from the banking app's own malware checks, Group-IB said, so a fraudulent payment can look unrelated to the alert already raised on the phone. It has confirmed the full chain on…