Beware of ToxicPanda: New Android Malware Steals Money by Hijacking OTPs and Bank Details

I came across an article about a new Android malware called ToxicPanda that we should be cautious about. ToxicPanda is a banking trojan that targets Android phones. It aims to steal money from bank accounts by intercepting OTPs (One-Time Passwords) through Android’s accessibility features. It spreads mainly through sideloading, where apps are downloaded from sources outside trusted stores like the Google Play Store.

Researchers discovered that ToxicPanda impersonates popular apps, such as Google Chrome, to trick users into downloading. Once installed, it can remotely control the phone to perform unauthorized actions, like money transfers.

Over 1,500 Android devices have been affected in countries like France, Spain, and parts of Latin America. Major institutions targeted include Citibank, PayPal, and Coinbase.

Remember, downloading apps only from trusted sources is one of the best ways to protect ourselves from threats like ToxicPanda.