# Android malware creates a hidden copy of your banking app

DevFeed: [Android malware creates a hidden copy of your banking app](<https://devfeed.tech/articles/android-malware-creates-a-hidden-copy-of-your-banking-app-8435.md>)

Original publisher: [Read original article](<https://www.malwarebytes.com/blog/mobile/2026/09/android-malware-creates-a-hidden-copy-of-your-banking-app>)

Author: Pieter Arntz

Published: 2026-09-11T12:14:55Z

Content type: news

Language: en

Sources: [Malwarebytes](<https://devfeed.tech/sources/malwarebytes.md>)

Topics: [Malware](<https://devfeed.tech/topics/malware.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [app](<https://devfeed.tech/tags/app.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [fraud](<https://devfeed.tech/tags/fraud.md>), [malware](<https://devfeed.tech/tags/malware.md>), [mobile](<https://devfeed.tech/tags/mobile.md>), [news](<https://devfeed.tech/tags/news.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [profile](<https://devfeed.tech/tags/profile.md>), [security](<https://devfeed.tech/tags/security.md>), [transactions](<https://devfeed.tech/tags/transactions.md>)

## AI overview

Gigabud is an Android banking Trojan that creates a work profile and clones a banking app so operators can conduct fraudulent transactions separately from malware detected in the personal profile.

## Source excerpt

The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions.