ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On

Back Thehackernews

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On

Thehackernews •[email protected] (The Hacker News) • August 20, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

AI is helping teams ship code 10–50× faster. This session shows how to keep security from falling behind.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ToxicPanda 2.0 Expands Android Banking Attacks to 16 Countries ToxicPanda 2.0 has been upgraded to target 349 financial applications across 16 countries, significantly expanding its reach beyond Europe. The malware exploits Android Wireless Debugging to gain unauthorized access to devices and steal banking credentials. This version of ToxicPanda represents a shift from a localized threat to a global one, with implications for financial institutions worldwide. Zimperium's zLabs team has documented these developments, highlighting the urgent need for enhanced security measures. The attack vector leverages vulnerabilities in Android systems, raising concerns about the security of mobile banking applications. As of now, the threat remains active and poses a significant risk to users of the affected financial apps. 3 sources 68

Extracted Entities

APT Groups (1)

Malware (1)

Platforms (1)