Dangerous Android banking malware appears to trick victims into fake money transfers

• ToxicPanda can initiate money transfers and even grab MFA codes
• The banking trojan targets consumers in Europe and Latin America
• More than 1,500 devices have already been compromised

A Chinese hacker is targeting Android devices in Europe and Latin America with a banking Trojan capable of stealing money from victim accounts.

A new report from cybersecurity researchers Cleafy says that the Trojan, ToxicPanda, is quite similar to a piece of older, known malware called TgToxic, which was first discovered in 2023. The two have some similarities, although ToxicPanda can be described as a “lite” version as many features appear to have been removed and some were left as simple placeholders.