Malware
ToxicPanda 2.0
- First Reported
- Aug 21, 2026
- Latest Reported
- Aug 22, 2026
Reported Context (2)
- ToxicPanda 2.0 is designed to target financial institutions across 16 countries, including Pakistan, South Africa, Mexico, Nigeria, India, Indonesia, and Panama. Reports Detail New Capabilities in Manic, Grandoreiro and ToxicPanda 2.0
- zLabs identified ToxicPanda 2.0, an updated Android banking Trojan that greatly expands its command set, targeting scope, and fraud capabilities, including PIN theft, lock-screen credential harvesting, and abuse of ToxicPanda 2.0 Adds ADB Pairing, Lock-Screen Theft and Expanded Banking Targets
Malware (3)
MITRE ATT&CK (9)
Vendors (2)
Products (6)
Tools (1)
Industries (4)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.