In the ever-evolving digital landscape, many have integrated technology into their lives.

However, the security of our personal information should also be a priority.

Cybersecurity experts recently discovered a new virus everyone should be aware of.

A sophisticated malware called ToxicPanda has been targeting people's hard-earned savings and personal data.

This malware is an evolution of the older TgToxic malware, but more focused on financial fraud.

ToxicPanda imitates the usual phone apps to infiltrate unsuspecting individuals' bank accounts.

Samsung, Google, and OnePlus devices among others run on Android. Image Credit: Pexels/Nothing Ahead

According to Cleafy's Threat Intelligence team, ToxicPanda has already spread to over 1,500 devices, with a significant presence in Europe and Latin America.

ToxicPanda could intercept one-time passwords used for bank transactions, manipulate Android security and accessibility services, and enable remote control over infected devices.

This could let attackers do unauthorised transactions.

It spreads primarily through sideloading, a common tactic to trick users into downloading an app from fake app pages.

While not found on official app stores like Google Play or Galaxy Store, its creators—believed to be based in China—are continuously enhancing its capabilities.

Here are some essential security tips every Android user must know:

Avoid sideloading: Sideloading apps outside the official app stores could expose your phones to any looming viruses and malware.

Always download apps from the Google Play Store or Galaxy Store.

Be wary of installation prompts: Ignore any prompts to install apps outside of the official app stores.

These could be attempts to install malicious software on your device.

Keep your device updated: Regularly update your Android device with the latest security and software updates.

These often include fixes to prevent malware.

Monitor your bank accounts: Keep a close eye on your bank account transactions. If you notice any unauthorised activity, contact your bank immediately.

Use multi-factor authentication: Always enable multi-factor authentication on your phones for an added layer of protection.

Stay informed: Stay updated about the latest security threats and how to protect yourself against them.

The emergence of ToxicPanda should be a reminder that the digital world is constantly changing.

Along with these changes are the methods used by cybercriminals.

By following these security tips, you can significantly reduce the risk of falling victim to such sophisticated attacks.

Key Takeaways

• A new malware called ToxicPanda has been targeting bank accounts by spoofing common Android apps.
• The malware, recently discovered by Cleafy, has since spread to over 1,500 devices globally.
• Android users were advised to avoid sideloading and keep their devices up to date to prevent ToxicPanda from infiltrating phones.
• Android users were also encouraged to use passkeys and multi-factor authentication to protect personal data against ToxicPanda.

Have you encountered any suspicious activity on your devices? Join the conversation and share your thoughts about ToxicPanda in the comments section below.

 

[deni67]

Consider setting up msg notifications with your bank account, so when money is transferred you are sent a notification. This way you will be alerted as soon as someone tries to take your funds

I have a notification beep everytime my bank is debited or money put in on the app on my phone.
It's a good idea.

 

[maggiej]

I do not use any apps on my PHONE it is just a phone to make calls. Unfortunately my bank has now changed how they run accounts and we are now going to be charged $2.50 for any and each transaction done in the bank . We are both aged pensioners and our pensions are paid into the bank. This is Bendigo Bank

 

[Sinikka Pollari]

I dont pay any fees with NAB