THREATOPS
THREAT OPS › Threat News › ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

lowthehackernewsPublished 2026-08-20

Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally.

Zimperium zLabs, in a Wednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications.

Original source: https://thehackernews.com/2026/08/toxicpanda-20-and-golddigger-expand.html