Cybersecurity researchers have found an enhanced version of the Android malware TgToxic. First documented by Trend Micro in 2023, the banking trojan steals crypto and financial data, mainly from mobile users in Asia. An updated variant introduced expanded data-gathering features and spread operations, believed to be run by Chinese-speaking threat actors. The frequent updates and improvements to the malware demonstrate the hackers’ commitment to monitoring open source intelligence and to adapting the software to improve security measures.

Google’s SafetyCore App Secretly Scans All Your Photos on Android Phones
Google’s Android System SafetyCore, a service for on-device content scanning, has been quietly installed on devices since October 2024, sparking privacy concerns. Critics liken it