42
57
30
60
60
57
60
42
60
45
Universitas Gadjah Mada, Indosat and NVIDIA Open Indonesia’s First University AI Center to Develop Local AI Talent
NVIDIA, Indosat, and Universitas Gadjah Mada opened Indonesia's first university-based AI technology center in Yogyakarta to build local AI talent.
The Ministry of Communication and Digital Affairs (Komdigi), Indosat Ooredoo Hutchison, NVIDIA, and Universitas Gadjah Mada launched the UGM Indosat NVIDIA AI Technology Center (NVAITC) in Yogyakarta. It is Indonesia's first university-based AI technology center, established under the country's AI Center of Excellence initiative. The center aims to develop local AI talent and strengthen Indonesia's domestic AI capabilities.
15
30
57
57
57
57
42
57
30
30
55
60
30
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
Group-IB reports the Gigabud Android banking trojan uses a cloned work profile to hide from banking app malware checks, with infections confirmed in Indonesia.
Group-IB says Gigabud installs a helper app called Vwork, derived from the open-source Shelter tool, which creates an Android work profile and drops a tampered banking app inside it, hiding the trojan from banking apps' malware scans. Gigabud, active since 2022 and linked by Group-IB to the GoldFactory group, abuses Accessibility access and overlay screens to steal credentials and run fraudulent payments while a black screen conceals the operator's actions. Group-IB confirmed the full attack chain on infected devices in Indonesia, counting about 1,469 compromised devices and estimated losses of roughly $960,000 between February and July 2026. Vwork-compatible Gigabud samples have been found targeting 11 countries including Brazil, Mexico, Indonesia, Thailand, and Türkiye, though only the Indonesian chain is confirmed.
60
55
60
42
60
30
42
42
30
30
60
60
42
Gigabud Uses Android App Cloning to Evade Fraud Detection
Group-IB reports the Gigabud Android banking trojan clones bank apps into isolated work profiles via the Vwork tool to evade fraud detection, with roughly $960,000 in losses in Indonesia.
Group-IB found Gigabud now ships dedicated code to work with Vwork, a weaponized fork of the open-source Android cloning app Shelter it attributes to GoldFactory, exposing cloning functions so any installed app can call them. After installing via phishing sites and messengers posing as airline, tax and government apps, operators request accessibility and overlay permissions, then clone the victim's banking app into a new work profile where it is invisible to signature-based detection in the personal profile. Fake login screens and overlays capture credentials while cloned-app transactions appear to banks as coming from an unrecognized, malware-free device. Between February and July 2026 in Indonesia, Group-IB observed about 1,469 compromised devices, 1,281 potentially compromised logins and estimated losses of roughly $960,939, with Vwork-enabled samples targeting 11 countries including Brazil, Mexico, Egypt and Thailand.
52
30
60
60