New Android Malware Hijacks Bank Calls for Fraudulent Transfers

A new Android banking malware, dubbed ToxicPanda, has infected over 1,500 devices, primarily in Europe and Latin America, enabling fraudulent money transfers by bypassing bank security measures. Believed to be developed by a Chinese-speaking threat actor, ToxicPanda shares similarities with the TgToxic malware but lacks some of its features, suggesting it's in early development. The malware disguises itself as popular apps and exploits Android's accessibility services to gain control over devices, intercept OTPs, and perform unauthorized transactions. Researchers have accessed its command-and-control panel, indicating ongoing development and potential future threats.