GoldFactory is a financially motivated cybercrime group that emerged in mid-2023, primarily targeting financial institutions and government services in the Asia-Pacific region. Assessed to be of Chinese origin with strong ties to cybercrime operations, the group's distinctive approach lies in its innovative use of AI-enabled mobile banking trojans, notably being the first recorded instance of an iOS trojan, GoldPickaxe, capable of stealing facial recognition data to generate deepfakes and bypass biometric authentication for unauthorized access to bank accounts. The group consistently adapts its tactics, developing multiple malware families to conduct sophisticated mobile fraud campaigns, and its operations are distinct from common ransomware groups due to this specialized focus on biometric bypass for direct financial theft.