Vwork: Weaponized Open-source Software as an Addon for Gigabud

Reported 09 Sep 2026 by otx · Severity: medium

Gigabud is an Android remote access banking trojan active since 2022, attributed to GoldFactory group, targeting victims across Southeast Asia, South Asia, Middle East, Africa and Latin America. The malware now utilizes Vwork, a weaponized fork of the open-source app cloning appl