• ToxicPanda can initiate money transfers and even obtain MFA codes
• The banking Trojan targets consumers in Europe and Latin America
• More than 1,500 devices have already been hacked

A Chinese hacker is targeting Android devices in Europe and Latin America with a banking Trojan that can steal money from victims’ accounts.

A new report from cybersecurity researchers Cleafy says the trojan, ToxicPanda, is quite similar to a piece of older, well-known malware called TgToxic, which was first spotted in 2023. The two have some similarities, although ToxicPanda can be described as a ‘lite’. version, as many features seem to have been stripped down and some left as simple placeholders.