ToxicPanda 2.0 Android Malware: Critical Threat

ToxicPanda 2.0 is an evolved Android banking trojan reported by Zimperium’s zLabs that abuses Accessibility Services, screen overlays and Wireless Debugging to capture credentials, display phishing overlays, and perform remote-control actions; the report notes expanded targeting of 349 banking, e‑wallet and cryptocurrency apps across 16 countries and support for 167 remote commands, outlines distribution via malicious APKs and deceptive install flows, and provides mitigation recommendations while indicating that specific IOCs are contained in the original research.