Gopix trojan targets whatsapp, chrome users in sophisticated banking heist

Kaspersky warns of a highly complex and technically advanced banking Trojan gaining traction via popular apps like WhatsApp and Google Chrome.

Gopix malware spreads undetected by analyzing ip addresses, stealing funds from unsuspecting users.

Security experts at Kaspersky have sounded the alarm on a sinister new threat lurking in the shadows of the digital world. Dubbed GoPix, this sophisticated banking Trojan has been secretly spreading its malicious wings, targeting unsuspecting victims through seemingly innocuous platforms like WhatsApp and Google Chrome.

Unlike other malware that indiscriminately infects any device it encounters, GoPix takes a more calculated approach. Upon initial exposure, the Trojan analyzes the recipient's IP address to determine whether they're a potential target or simply a bot used by cybersecurity firms to track its movements.

Only those deemed vulnerable by the malware's discerning eye are subjected to the full extent of its nefarious intentions. Once inside, GoPix zeroes in on its ultimate goal: pilfering financial information to siphon funds from victims' bank accounts or cryptocurrency wallets.

This stealthy tactic mirrors the methods used by nation-state attackers and hackers, making it all the more challenging for researchers to uncover and neutralize the threat.

Kaspersky has identified GoPix as a particularly stubborn menace, with over 90,000 attempted infections worldwide as of March 2026. Originating from Brazil, the malware has been in operation for three years, exploiting a type of element called Proxy AutoConfig, which enables man-in-the-middle attacks and fraudulent public advertising.

The spread of GoPix is attributed to cunning c criminals, who utilize Google Ads to distribute malicious links disguised as innocuous advertisements within popular apps. When users unwittingly click on these, they are redirected to GoPix's cunningly crafted landing pages.

As the digital landscape continues to evolve, it's increasingly crucial for individuals and organizations alike to remain vigilant and proactive in their defense against evolving threats like GoPix. By staying informed and implementing robust cybersecurity measures, we can collectively work to safeguard our financial futures from the insidious grasp of these sophisticated cybercriminals.