ToxicPanda malware was first spotted back in 2024. It’s an Android Trojan, that had the potential of draining your bank account. Well, ToxicPanda 2.0 now exists as well, unfortunately.
ToxicPanda 2.0 is a new and improved Trojan that targets 349 banking apps across 16 countries
This Trojan has been spotted by the Zimpreium ZLabs team. It has been upgraded compared to the first version, and it’s now hitting 349 banking, financial, e-wallet, and crypto apps across 16 countries.
Zimpresium says that ToxicPanda 2.0 “significantly expands both its technical capabilities and the scale of its fraud campaign.” This new version introduces 167 remote commands, and it expands credential theft from a handful of banking applications to a ton more, as mentioned earlier. The numbers are now in the hundreds.
This new version adds various sophisticated techniques to compromise Android devices
This new version also adds sophisticated techniques to compromise Android devices, says Zimperium. It can now harvest banking credentials and maintain long-term persistence on infected devices. It also includes automated ADB abuse, lock screen credential theft, and more advanced capabilities.
“ToxicPanda 2.0 demonstrates how quickly mobile malware continues to evolve,” said Nico Chiaraviglio, Chief Scientist at Zimperium zLabs. He also added: “Rather than simply stealing credentials, this malware automates device compromise, expands financial targeting on a global scale, and abuses legitimate Android features to gain control over infected devices. It reflects the increasing sophistication of modern mobile threats.”
The company also added that its AI-empowered, on-device mobile security “protects organizations against advanced threats like ToxicPanda by detecting malware, device compromise, phishing overlays, and malicious application behavior before attackers can steal credentials or gain control of the device.”
If you’re interested in checking out Zimperium’s complete technical analysis, which includes indicators of compromise (IOCs), that’s also available. All in all, ToxicPanda 2.0 seems to be way more capable than its predecessor, unfortunately.
The post ToxicPanda 2.0 Trojan Is Here, and It’s Hunting 349 Banking Apps Across 16 Countries appeared first on Android Headlines.
