This Android Banking Trojan Uses a Fake VPN Prompt to Silence Google's Defenses

Advanced Android Banking Trojan Uses Fake VPN to Disable Play Protect

Android banking trojans continue to evolve with increasingly sophisticated techniques designed to bypass mobile security protections. A recent discovery highlights one such threat that employs a deceptive VPN prompt to disable Google Play Protect, the built-in malware scanning service on Android devices. Security researchers at TechRadar reported on this campaign, which demonstrates how attackers combine social engineering with technical tricks …

This Android banking trojan uses a fake VPN prompt to silence Google's defenses

Researchers found banking malware requests VPN permissions to block Google Play and Play Protect on infected Android phonesToxicPanda 2.0 bypasses security to install hidden payloads, targeting 349 banking and crypto apps across 16 countries The malware can even seize shell-level control of a deviceSecurity researchers have flagged a new twist in Android banking malware: a trojan that turns your phone's own VPN feature against you. A report from…

ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps

ToxicPanda 2.0 now targets 349 financial apps across 16 countries while abusing VPN, Accessibility and Android debugging features for deeper control. This article has been indexed from eSecurity Planet Read the original article: ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps The post ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps appeared first on IT Security News.

ToxicPanda 2.0 Blocks Google Play

ToxicPanda 2.0 is giving attackers deeper remote control over infected Android phones, including a new way to keep Google Play out of the way. Security researchers at Zimperium’s zLabs have uncovered a new version of the ToxicPanda Android banking Trojan with a far wider reach and a much larger arsenal of commands. The malware now supports 167 remote commands and can target 349 banking, financial, e-wallet and cryptocurrency applications across …