Gigabud Trojan Creates Android Work Profiles to Hide from Banking App Malware Checks

Gigabud is an Android remote access trojan that installs a second app called Vwork. Vwork creates a work profile on the phone and places a tampered banking app inside it, preventing the banking app’s malware checks from seeing the trojan in the personal profile. The full chain has been confirmed on infected devices in Indonesia.