ToxicPanda Android Banking Malware Infected 4500+ Devices to Steal Banking Credentials

Threat Score:
54
Cybersecurity News
6 days ago

Overview

A sophisticated Android banking trojan known as ToxicPanda has successfully infiltrated over 4500 mobile devices across Europe, representing one of the most significant mobile banking malware campaigns observed in recent years. The malware specifically targets banking and digital wallet applications, employing advanced overlay techniques to steal login credentials, PIN codes, and pattern locks while enabling […]...

Related Articles

5 articles
1

Trend Micro Apex One Hit by Actively Exploited RCE Vulnerability

GB Hackers • 1 hour ago

Trend Micro Apex One Hit by Actively Exploited RCE Vulnerability Trend Micro has issued an urgent security bulletin warning customers of critical remote code execution vulnerabilities in its Apex One on-premise management console that are being actively exploited by attackers in the wild. The cybersecurity company disclosed twocommand injectionflaws on August 5, 2025, both carrying a maximum CVSS score of 9.4, indicating the severity of the threat to enterprise networks worldwide. Critical Vulne

Score
87
Read more
3

Cyware unveils open-source MCP Server to power AI-driven cyber defense

Feeds2 • 1 hour ago

Cyware unveils open-source MCP Server to power AI-driven cyber defense Cywarehas released Cyware MCP Server (Model Context Protocol Server) to advance the future of AI-powered cyber defense. The new open-source capability is purpose-built to enable generative AI-native workflows, allowing seamless integration between Cyware’s threat intelligence; security automation platforms and large language models (LLMs). “Cyware MCP Server exposes our Agentic AI components to AI Assistants enabling access t

Score
82
Read more
4

CISA Warns of D-Link Vulnerabilities Actively Exploited in Attacks

Cybersecurity News • 7 hours ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a new alert, adding three vulnerabilities affecting D-Link devices to its Known Exploited Vulnerabilities (KEV) Catalog. The inclusion of these flaws in the catalog signifies that they are being actively exploited by malicious cyber actors in real-world attacks, posing a significant threat to networks. The […]

Score
82
Read more
5

DefCamp Capture the Flag (D-CTF) 2025 Quals

Ctftime • 50 minutes ago

Name: DefCamp Capture the Flag (D-CTF) 2025 Quals (an Defcamp CTF Qualification event.) Date: Sept. 12, 2025, 10 a.m. — 14 Sept. 2025, 10:00 UTC   [add to calendar] Format: Jeopardy On-line Offical URL: Rating weight: 0.00 Event organizers: CCSIR.org

Score
81
Read more