GoldFactory – CyberSecurityBoard

Malware

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers have uncovered significant updates to the Android banking trojans ToxicPanda (aka TgToxic) and GoldDigger, both of which now feature enhanced…

accessibility service Android malware banking trojan dpt-shell

August 20, 2026

Malware

GoldDigger: Android Banking Trojan with On-Device Fraud

GoldDigger is an Android banking trojan attributed to the GoldFactory threat actor. It uses the dpt-shell packer for obfuscation and evasion, and…

Android malware banking trojan dpt-shell GoldDigger

August 20, 2026

Attack Groups

GoldFactory: Chinese-Speaking Threat Actor Behind Banking Trojans

GoldFactory is a Chinese-speaking threat actor linked to multiple Android and iOS banking malware families, including GoldDigger, GoldPickaxe, GoldDiggerPlus, and GoldKefu. The…

banking malware GoldDigger GoldFactory GoldPickaxe

August 20, 2026