Cybersecurity company, Group-IB's researchers found a new set of aggressive trojans named GoldPickaxe, targeting iPhone and iPad users by stealing their facial recognition data to break into their bank accounts.
The researchers informed that the latest malware is a variant of an Android trojan named GoldDigger, which was found in October 2023.
Group-IB stated in a report that the malware is designed to steal facial captures from the devices in order to get an AI generated image using deepfake technology, which is later used in combination with intercepted SMS messages to gain unauthorized access to the iOS user's bank account.
Initially, the trojan was distributed through Apple's (AAPL) TestFlight, which lets developers release beta versions of their apps without going through the App Store's review process. However, the tech giant removed it from the TestFlight, prompting hackers to choose another approach based on a Mobile Device Management or MDM profile, which manages features of enterprise devices.
The hackers used these MDM profiles to encourage people to install apps from outside the App Store or visit fake web pages to capture information from their device such as SMS messages, ID documents and facial biometric data, without compromising the iPhone's FaceID data.
According to the report, the malware is currently in an "active stage of evolution" and so far had mainly targeted users in Vietnam and Thailand.
For comments and feedback contact: editorial@rttnews.com
Business News
April 17, 2026 15:29 ET The ongoing conflict in the Middle East continues to raise concerns for policymakers who worry about the impact of the supply shock and high energy prices on the real economy. Producer price data and various survey results on the housing market were the main news from the U.S. this week. In Europe, industrial production data for the euro area gained attention. GDP figures out of China and the policy move by the Singapore central bank were in focus in Asia.