In the ever-evolving digital landscape, many have integrated technology into their lives.

However, the security of our personal information should also be a priority.

Cybersecurity experts recently discovered a new virus everyone should be aware of.

A sophisticated malware called ToxicPanda has been targeting people's hard-earned savings and personal data.

This malware is an evolution of the older TgToxic malware, but more focused on financial fraud.

ToxicPanda imitates the usual phone apps to infiltrate unsuspecting individuals' bank accounts.

Samsung, Google, and OnePlus devices among others run on Android. Image Credit: Pexels/Nothing Ahead

According to Cleafy's Threat Intelligence team, ToxicPanda has already spread to over 1,500 devices, with a significant presence in Europe and Latin America.

ToxicPanda could intercept one-time passwords used for bank transactions, manipulate Android security and accessibility services, and enable remote control over infected devices.

This could let attackers do unauthorised transactions.

It spreads primarily through sideloading, a common tactic to trick users into downloading an app from fake app pages.

While not found on official app stores like Google Play or Galaxy Store, its creators—believed to be based in China—are continuously enhancing its capabilities.

Here are some essential security tips every Android user must know:

Avoid sideloading: Sideloading apps outside the official app stores could expose your phones to any looming viruses and malware.

Always download apps from the Google Play Store or Galaxy Store.

Be wary of installation prompts: Ignore any prompts to install apps outside of the official app stores.

These could be attempts to install malicious software on your device.

Keep your device updated: Regularly update your Android device with the latest security and software updates.

These often include fixes to prevent malware.

Monitor your bank accounts: Keep a close eye on your bank account transactions. If you notice any unauthorised activity, contact your bank immediately.

Use multi-factor authentication: Always enable multi-factor authentication on your phones for an added layer of protection.

Stay informed: Stay updated about the latest security threats and how to protect yourself against them.

The emergence of ToxicPanda should be a reminder that the digital world is constantly changing.

Along with these changes are the methods used by cybercriminals.

By following these security tips, you can significantly reduce the risk of falling victim to such sophisticated attacks.

Key Takeaways

• A new malware called ToxicPanda has been targeting bank accounts by spoofing common Android apps.
• The malware, recently discovered by Cleafy, has since spread to over 1,500 devices globally.
• Android users were advised to avoid sideloading and keep their devices up to date to prevent ToxicPanda from infiltrating phones.
• Android users were also encouraged to use passkeys and multi-factor authentication to protect personal data against ToxicPanda.

Have you encountered any suspicious activity on your devices? Join the conversation and share your thoughts about ToxicPanda in the comments section below.

 

[Mr Chips]

That is good advice SDC, well done and it is easy to follow.

 

[Squizzy1]

I'm not sure the convenience of this digital world is worth the effort, it appears to be growing in pitfalls by the day.

 

[Trina G]

I’m afraid technology is getting way out of hand, especially for the older generation. Sometimes I feel like just switching it all off and forgetting about it. Privacy is almost if not completely impossible in this day and age.

 

[deni67]

Thank you for that information SDC, luckily I only use Google play store for my apps.
My bank did get hacked a few years ago, someone from England brought fake viagra, I had a good laugh with the bank when I called them to report it.
I got all of my money back within two weeks, even the companies reimbursed me so I got double the payments

 

[Veggiepatch]

You forgot another reason for your bank accounts being drained on a regular basis.

The exorbitant fees imposed on bank customers to prop up the outrageous salaries of bank CEOs.

 

[Dynamo]

Oh no. I shudder to think that our savings could be stolen again.

 

[deni67]

You forgot another reason for your bank accounts being drained on a regular basis.

The exorbitant fees imposed on bank customers to prop up the outrageous salaries of bank CEOs.

I don't pay fees with Westpac

 

[Veggiepatch]

I don't pay fees with Westpac

Neither do I with the CBA.

Think of the millions of account holders who are unaware of how to reduce or eliminate bank fees?

 

[Jumping Jack Flash]

I do not have a banking app on my mobile ......

 

[deni67]

Neither do I with the CBA.

Think of the millions of account holders who are unaware of how to reduce or eliminate bank fees?

True!

 

[Hollingworthlake]

I don't pay fees with Westpac

 

[Hollingworthlake]

How do you manage not having to pay fees?

 

[deni67]

How do you manage not having to pay fees?

I'm on a disibility pension and my account is a no fee savings account with Westpac.

 

[Hollingworthlake]

I'm on a disibility pension and my account is a no fee savings account with Westpac.

 

[Hollingworthlake]

Good for you. Any way you can avoid. Contributing to the Bank’s profit for looking after our money.

 

[Dynamo]

THanks for the warming and information

 

[kerrikennel]

Consider setting up msg notifications with your bank account, so when money is transferred you are sent a notification. This way you will be alerted as soon as someone tries to take your funds

 

[Ebby]

I don't pay fees with Westpac

lf you have your pension put in your bank you should be exempt from fees.l don't pay fees either

 

[PattiB]

We don’t pay fees on our accounts with a credit union & even manage to escape card fees in shops. It’s very rare to see a card usage fee on any accounts.