ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Summary

Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications.

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.