ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers identified an updated version of ToxicPanda 2.0, also known as TgToxic, featuring significant enhancements including a set of 167 remote commands and expanded global targeting. The Android malware specifically features a PIN harvesting workflow that targets over 140 banking and cryptocurrency applications.