Malware

ToxicPanda 2.0

For your environment

Hunt this family in your stack

Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.

Start free trial

MITRE ATT&CK

Techniques & procedures

13 distinct techniques documented for this family, organized by ATT&CK tactic.

Initial Access

1 technique

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

Execution

1 technique

T1059Command and Scripting InterpreterEvidence5

The result is particularly significant because the malware obtains shell-level access, allowing it to execute commands directly on the device.

Persistence

4 techniques

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1546Event Triggered ExecutionEvidence2

ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell access and bypassing standard runtime consent prompts.

T1546.008Accessibility FeaturesEvidence2

ToxicPanda automates that process using Android's Accessibility Services. It can enable Developer Options, turn on Wireless Debugging, extract the temporary ADB pairing code, and complete the pairing process with the device's ADB service

T1547Boot or Logon Autostart ExecutionEvidence2

This allows it to execute high-privilege commands, neutralize background restrictions, and enforce persistence.

Privilege Escalation

6 techniques

T1068Exploitation for Privilege EscalationEvidence2

The Trojan also adds more sophisticated techniques for compromising Android devices, including privilege escalation and shell-level access through Android's Wireless Debugging and Android Debug Bridge (ADB)

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1546Event Triggered ExecutionEvidence2

ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell access and bypassing standard runtime consent prompts.

T1546.008Accessibility FeaturesEvidence2

T1547Boot or Logon Autostart ExecutionEvidence2

This allows it to execute high-privilege commands, neutralize background restrictions, and enforce persistence.

T1548Abuse Elevation Control MechanismEvidence2

The malware automates the entire process of turning it on, tapping the build number seven times to unlock developer options, toggling wireless debugging, and then scraping the six-digit pairing code straight off the screen using accessibility permissions. From there it performs the actual cryptographic pairing handshake itself, gaining shell-level access to the device

Stealth

2 techniques

T1036MasqueradingEvidence1

The malware pretends to be a legitimate app and asks for VPN permissions through a fake installation screen.

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

Credential Access

3 techniques

T1056Input CaptureEvidence4

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1056.001KeyloggingEvidence2

One notable change in ToxicPanda 2.0 is its distribution infrastructure. Researchers observed samples being delivered through Amazon Web Services hosted buckets

T1056.002GUI Input CaptureEvidence1

it can now overlay a convincing fake version of the phone’s own lock screen to steal the device PIN, pattern, or password outright

Collection

3 techniques

T1056Input CaptureEvidence4

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1056.001KeyloggingEvidence2

One notable change in ToxicPanda 2.0 is its distribution infrastructure. Researchers observed samples being delivered through Amazon Web Services hosted buckets

T1056.002GUI Input CaptureEvidence1

it can now overlay a convincing fake version of the phone’s own lock screen to steal the device PIN, pattern, or password outright

Command and Control

2 techniques

T1071.001Web ProtocolsEvidence1

When the victim launches one of the targeted applications, the malware requests the relevant malicious HTML overlay from its C2 server.

T1105Ingress Tool TransferEvidence1

with samples now getting served from Amazon AWS-hosted storage buckets rather than whatever ad-hoc infrastructure earlier campaigns used.

ACTIVITY FEED

Recent activity

2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

2 SOURCESView more in app

security weekNews

Aug 22, 2026

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight - SecurityWeek

Updated Android banking trojan variant targeting financial institutions across 16 countries. It supports 167 remote commands, targets nearly 350 financial apps, and uses an automated click-based mechanism to abuse Android Wireless Debugging (ADB) for privilege escalation and shell-level access.

scworldNews

Aug 21, 2026

New Android banking Trojan ToxicPanda 2.0 expands victim targeting | brief | SC Media

An Android banking trojan that targets banking and cryptocurrency applications using PIN theft and overlay-based credential theft. It abuses Android Accessibility Service to enable wireless debugging, gain shell access, bypass runtime consent prompts, execute high-privilege commands, maintain persistence, and steal device lock credentials via screen overlay attacks.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets match these IOCs, which detections are missing, which campaigns to expect next, and what to do in the next 30 minutes.

Start free trial

IOC matching

Match every observed IP, domain, and hash against your live telemetry.

Threat actor attribution

Named campaigns wielding this family, with evidence pinned to each claim.

Exploited vulnerabilities

CVEs this family uses for access and lateral movement.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mapping13

Every documented technique, ranked by evidence weight.

Researcher chatter

Reddit, Mastodon, and CTI community discussion around this family.

Back to malware

Malware

ToxicPanda 2.0

For your environment

Hunt this family in your stack

Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.

Start free trial

MITRE ATT&CK

Techniques & procedures

13 distinct techniques documented for this family, organized by ATT&CK tactic.

Initial Access

1 technique

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

Execution

1 technique

T1059Command and Scripting InterpreterEvidence5

The result is particularly significant because the malware obtains shell-level access, allowing it to execute commands directly on the device.

Persistence

4 techniques

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1546Event Triggered ExecutionEvidence2

ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell access and bypassing standard runtime consent prompts.

T1546.008Accessibility FeaturesEvidence2

T1547Boot or Logon Autostart ExecutionEvidence2

This allows it to execute high-privilege commands, neutralize background restrictions, and enforce persistence.

Privilege Escalation

6 techniques

T1068Exploitation for Privilege EscalationEvidence2

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1546Event Triggered ExecutionEvidence2

ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell access and bypassing standard runtime consent prompts.

T1546.008Accessibility FeaturesEvidence2

T1547Boot or Logon Autostart ExecutionEvidence2

This allows it to execute high-privilege commands, neutralize background restrictions, and enforce persistence.

T1548Abuse Elevation Control MechanismEvidence2

Stealth

2 techniques

T1036MasqueradingEvidence1

The malware pretends to be a legitimate app and asks for VPN permissions through a fake installation screen.

T1078Valid AccountsEvidence2

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

Credential Access

3 techniques

T1056Input CaptureEvidence4

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1056.001KeyloggingEvidence2

One notable change in ToxicPanda 2.0 is its distribution infrastructure. Researchers observed samples being delivered through Amazon Web Services hosted buckets

T1056.002GUI Input CaptureEvidence1

it can now overlay a convincing fake version of the phone’s own lock screen to steal the device PIN, pattern, or password outright

Collection

3 techniques

T1056Input CaptureEvidence4

The variant also introduces a lock-screen overlay designed to capture credentials entered by the victim.

T1056.001KeyloggingEvidence2

One notable change in ToxicPanda 2.0 is its distribution infrastructure. Researchers observed samples being delivered through Amazon Web Services hosted buckets

T1056.002GUI Input CaptureEvidence1

it can now overlay a convincing fake version of the phone’s own lock screen to steal the device PIN, pattern, or password outright

Command and Control

2 techniques

T1071.001Web ProtocolsEvidence1

When the victim launches one of the targeted applications, the malware requests the relevant malicious HTML overlay from its C2 server.

T1105Ingress Tool TransferEvidence1

with samples now getting served from Amazon AWS-hosted storage buckets rather than whatever ad-hoc infrastructure earlier campaigns used.

ACTIVITY FEED

Recent activity

2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

2 SOURCESView more in app

security weekNews

Aug 22, 2026

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight - SecurityWeek

scworldNews

Aug 21, 2026

New Android banking Trojan ToxicPanda 2.0 expands victim targeting | brief | SC Media

What this page doesn’t show

The version that knows your environment.

Start free trial

IOC matching

Match every observed IP, domain, and hash against your live telemetry.

Threat actor attribution

Named campaigns wielding this family, with evidence pinned to each claim.

Exploited vulnerabilities

CVEs this family uses for access and lateral movement.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mapping13

Every documented technique, ranked by evidence weight.

Researcher chatter

Reddit, Mastodon, and CTI community discussion around this family.