Hackers are injecting malicious code into legitimate mobile banking apps, redistributing them via phishing to enable device takeovers, credential theft, and fraud. Campaigns like GoldFactory have infected thousands, especially in Southeast Asia, amid rising Trojan attacks. Experts urge enhanced security, user education, and AI defenses to combat these evolving threats.