The ToxicPanda Android banking trojan has emerged as a significant threat, compromising over 4,500 devices primarily in Portugal and Spain as of early 2025, with a focus on stealing banking credentials, overlaying PIN and pattern codes, and enabling unauthorized transactions.
Initially identified by Trend Micro in 2022 targeting Southeast Asia, the malware shifted to Europe in 2024, infecting around 1,500 devices mainly in Italy, Portugal, Hong Kong, Spain, and Peru, as reported by Cleafy researchers.
https://gbhackers.com/toxicpanda-androi ... g-malware/