ZimperiumPublished
The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile
By Vishnu Pratapagiri
Excerpt
Executive Summary
The zLabs team recently identified an updated variant of ToxicPanda, the Android banking Trojan known to have primarily targeted Europe, that introduces significant enhancements, including a comprehensive command set of 167 remote commands and substantially expands its targets globally. Among the newly added capabilities is a PIN theft mechanism targeting more than 140 banking and cryptocurrency applications. By abusing the Android Accessibility Service, threat actors can steal every UI element on the s…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Zimperium on zimperium.com.
Mentioned in the excerpt
More from Zimperium1
- Android Bankers: 4 Campaigns In A RowZimperium · Published 16 Apr
On the same topics
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- apk.goldeneagleMalpedia · Added 19 Oct
- Hack Brief: Emergency-Number Hack Bypasses Android Lock ScreensWIRED · Published 15 Sep 2015
- Linked Devicessupport.signal.org · Added 18 Oct
