ToxicPanda Android malware expands targets, abuses VPN to block Play Store

Mon, 24 Aug 2026 11:41:22 +0000

Engineer — Skip
SOC/IR — Learn: The VPN-permission-as-blocker technique is a noteworthy evasion TTP for mobile threat awareness, but the summary provides no IOCs or detection signatures to act on; file for context when tuning mobile EDR or MAM policies.
Leader — Skip

Banking-Malware on CuraSec