www.securityweek.com 8/22/2026, 8:31:37 AM · external

New Android and Windows banking trojans hit banks worldwide

New Android and Windows banking trojans hit banks worldwide
CyberSIXT Evidence Panel
Primary Source acronis.com

CYBERSECURITY companies reported on new banking trojans targeting users globally. Three key malware types discussed include:

1. **Manic** - An Android trojan with banking and spyware capabilities, primarily targeting Ukrainian institutions but also affecting Russian and European banks, cryptocurrency services, and military apps. It can log keystrokes, steal data, and use offline mesh relays to transmit information.

2. **Grandoreiro** - A decade-old Windows banking trojan originating from Brazil, now expanding its attacks in Mexico and Europe. It uses DLL sideloading via the legitimate Duplicate Files Finder app to evade detection and includes anti-analysis features to thwart security measures.

3. **ToxicPanda 2.0** - An updated Android trojan targeting financial apps across 16 countries, now featuring a broad command set and using Amazon AWS for delivery, indicating a shift in distribution methods.

These updates highlight ongoing threats in the cybersecurity landscape, particularly related to banking malware.

View Primary Source Via www.securityweek.com

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline