He was identified in Group-IB
Group-IB has discovered a new Trojan for iOS, designed to steal biometric data, user identification documents, and intercept SMS.
The Trojan, which was named GoldPickaxe.iOS by Group-IB's Threat Intelligence division, was attributed to a Chinese hacker going by the name GoldFactory, responsible for developing a suite of sophisticated banking Trojans. The list includes the previously identified GoldDigger and the newly identified GoldDiggerPlus, GoldKefu and GoldPickaxe for Android.
In the future, attackers use the stolen biometric data, using artificial intelligence services to create deepfakes, which allow them to replace their face with the victim’s.
Cybercriminals can use this method to gain unauthorized access to a victim's bank account — This is a new method of fraud, not previously encountered by Group-IB researchers. GoldFactory Trojans target the Asia-Pacific region, particularly Thailand and Vietnam, posing as local banks and government organizations.
It's worth noting that this is a rare case of malware targeting Apple's mobile operating system.