This Android banking trojan uses a fake VPN prompt to silence Google's defenses

Researchers found banking malware requests VPN permissions to block Google Play and Play Protect on infected Android phonesToxicPanda 2.0 bypasses security to install hidden payloads, targeting 349 banking and crypto apps across 16 countries The malware can even seize shell-level control of a deviceSecurity researchers have flagged a new twist in...