ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers have discovered an updated version of the ToxicPanda malware, which has undergone significant enhancements. The updated malware includes a set of remote commands and has expanded its global reach. Additionally, it features a PIN harvesting workflow that targets over 140 banking and cryptocurrency applications on Android devices. The malware's capabilities have been detailed in a report by Zimperium zLabs. The enhancements to ToxicPanda suggest a growing threat to Android users, particularly those using banking and cryptocurrency apps.