ToxicPanda 2.0: an Android trojan that commits bank fraud from your own phone, your own session, your own IP. We checked our corpus for it plus 5 other major families. Zero hits in 80k sampled indicat

ToxicPanda 2.0: an Android trojan that commits bank fraud from your own phone, your own session, your own IP. We checked our corpus for it plus 5 other major families. Zero hits in 80k sampled indicators. Indicators exist (Zimperium zLabs), our collection surface just does not reach them. What catches it: stealer-log credential exposure, not a malware signature. # infosec # threatintel # androidse