> TritonInfoSec News
Home / Aug 24, 2026 / Story
0
#1 BleepingComputer general August 23, 2026 at 14:23 UTC

ToxicPanda Android malware uses VPN permissions to block Google Play

By Bill Toulas

AI Summary

ToxicPanda Android malware has undergone significant expansion, now targeting 349 applications and supporting 167 remote commands. The updated variant abuses VPN permissions to block Google Play, likely to prevent security updates or competing app installations. Security teams managing Android device fleets should review VPN permission grants and monitor for unauthorized command-and-control activity.

Read full article → https://www.bleepingcomputer.com/news/security/tox…

Relevance score: 72.0/100

# More from August 24

  1. 2
    Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight SecurityWeek
  2. 3
    Hackers infect Android car head units with proxy botnet malware BleepingComputer
  3. 4
    Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near Dark Reading
  4. 5
    How an Emerging Industrial Protocol Family Could Put OT at Risk Dark Reading
  5. 6
    TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit The Hacker News
  6. 7
    Named Pipes Under Attack: Securing Windows Interprocess Communication BleepingComputer
  7. 8
    Due to need for 'absolute success,' China delays critical Moon launch to 2027 Ars Technica Security
  8. 9
    Postal Service moves to finalize mail ballot regs before SCOTUS ruling CyberScoop
  9. 10
    Volcanoes that made history Ars Technica Security