#ParsedReport #CompletenessMedium
09-09-2026

Vwork: Weaponized Open-source Software as an Addon for Gigabud

https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/

Report completeness: Medium

Actors/Campaigns:
Goldfactory

Threats:
Vwork
Gigabud_rat
Shelter

Victims:
Banking, Financial services, Cryptocurrency

Industry:
Financial, Aerospace, Government

Geo:
Laos, Egypt, Indonesian, Colombia, Latin america, Chinese, Middle east, Africa, Indonesia, Philippines, Mexico, Brazil, Morocco, Thailand, Asia

TTPs:
Tactics: 1
Technics: 24

IOCs:
File: 2
Hash: 9

Soft:
Android, Telegram

Algorithms:
aes-ecb