ToxicPanda adds VPN blocking and wireless ADB abuse to Android toolkit
Image: Primary ToxicPanda 2.0 has added VPN-service permissions that let it block Google Play and Google Play Services communications, according to Zimperium's analysis. The malware blocks those channels before installing its payload, then seeks Accessibility Service permissions. Researchers said it can automate Wireless ADB to gain shell-level access, supports 167 remote commands, and uses phishing overlays targeting 349 banking, financial, cryptocurrency and e-wallet apps across 16 countries. Zimperium said the malware is distributed through Amazon AWS-hosted buckets.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
