News and Analysis

ToxicPanda, a new banking botnet, has targeted at least 1,500 devices across Italy, Portugal, Spain, and Latin America, aiming to defraud 16 financial institutions, according to cybersecurity firm Cleafy. The malware’s creators, Chinese-speaking actors, bypass banking security to initiate scam money transfers. It exploits Android’s accessibility services, intercepts one-time passwords, and avoids detection with code-hiding tricks. ToxicPanda also signifies a geographical expansion of these threat actors outside Southeast Asia.