CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

ToxicPanda Android malware uses VPN permissions to block Google Play

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4890

As cited

Copy frozen at (site build).

threat intel

ToxicPanda Android malware uses VPN permissions to block Google Play

ToxicPanda Android malware has expanded its attack surface to target 349 applications and now supports 167 remote commands. The malware exploits VPN permissions to interfere with Google Play and other security mechanisms on infected devices.

Why it matters: Android users and enterprises deploying mobile apps face increased risk from this widely-targeting malware; defenders should monitor for ToxicPanda variants and review app permission models for VPN abuse.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

ToxicPanda Android malware uses VPN permissions to block Google Play

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

ToxicPanda Android malware uses VPN permissions to block Google Play

The ToxicPanda Android malware has added new capabilities, including the ability to block Google Play using virtual private network (VPN) permissions. It now targets 349 applications and supports 167 remote commands.

Why it matters: Android users and security teams should assess exposure to this malware, which can disrupt app access and execute extensive remote commands.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

ToxicPanda Android malware uses VPN permissions to block Google Play

The ToxicPanda Android malware has added new capabilities, including the ability to block Google Play using virtual private network (VPN) permissions. It now targets 349 applications and supports 167 remote commands.

Why it matters: Android users and security teams should assess exposure to this malware, which can disrupt app access and execute extensive remote commands.

VendorsGoogle
Actorsplay
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary