Skip to content
MalwareWiki

Malware

ToxicPanda

ToxicPanda is an Android banking RAT first identified by Cleafy in October 2024.

ToxicPanda is a Android malware family.

Background

ToxicPanda is an Android banking RAT that Cleafy first documented in October 2024. While it resembles the TgToxic campaign, it seems to be a fresh creation rather than a spin-off of it. Its operators are probably Chinese speakers. Early versions relied solely on hardcoded C2 domains, but the malware began adopting a DGA in late 2024.

Source: Malpedia (Fraunhofer FKIE).