Gigabud
- Malware type
- rat, credential-stealer, screen-capture
- Family
- Malware family
- Last IoC activity
- 2026-06-29 07:56:42
- Profile updated
- 2026-07-07 14:06:52
Targeted industries: financial-services retail-and-hospitality
Context
Gigabud is the name of an Android Remote Access Trojan (RAT) Android that can record the victim's screen and steal banking credentials by abusing the Accessibility Service. Gigabud masquerades as banking, shopping, and other applications. Threat actors have been observed using deceptive websites to distribute Gigabud RAT.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Apk.Gigabud (report)
- blog.cyble.com — Gigabud Rat New Android Rat Masquerading As Government Agencies (report)
- group-ib.com — Gigabud Banking Malware (report)