The GoldPickaxe Trojan, initially known for targeting Android users, has now evolved to pose a threat to iPhone users as well. Security firm Group-IB has identified GoldPickaxe as the world’s first iPhone Trojan, capable of stealing biometric data, text messages, and even posing as a bank to gather personal information such as ID card photos.
While the Trojan has primarily targeted users in Vietnam and Thailand by impersonating financial institution applications, Group-IB warns that the threat is still evolving. Despite Apple’s stringent vetting process for applications on the App Store, the GoldPickaxe Trojan managed to bypass their safeguards.
The distribution method used by cybercriminals involves malicious iOS mobile device management profiles. As the threat continues to evolve, distribution mechanisms may become more complex. To protect against GoldPickaxe, Apple users are advised to only install applications from trusted developers via the App Store, avoid installing iPhone MDM profiles from untrusted sources, refrain from sharing personal information over the phone, verify financial account details through official websites, and stay vigilant with operating system updates.
It is crucial for iPhone users to remain cautious and proactive in safeguarding their personal information and financial accounts against this sophisticated Trojan. By following these preventive measures, users can protect themselves from falling victim to the GoldPickaxe threat.