Security3 min read
ToxicPanda 2.0 uses VPN permissions to block Google Play before the payload
Zimperium said ToxicPanda 2.0 requests VPN permissions to block Google Play before the rest of the malware lands. The family supports 167 remote commands and phishing overlays for 349 banking and crypto apps in 16 countries.
