Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
ToxicPanda: New Android Banking Trojan Targeting Multiple Regions
Malware Families
Excerpt
Threat research team identified a new Android malware strain, initially thought to be TgToxic but exhibiting key divergences from its predecessor, leading us to classify it as "ToxicPanda." ToxicPanda is a banking Trojan leveraging Remote Access Trojan (RAT) techniques to initiate fraudulent money transfers through account takeover (ATO), exploiting On-Device Fraud (ODF) techniques. The malware bypasses banking countermeasures for identity verification and…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | f5c44a7044572e39e8fb9fa8e1780924 | Medium | Score 53/100 | First seen |
| MD5 | 6e0a7e94ce0a1fe70d43fe727dc41061 | Medium | Score 53/100 | First seen |
| Domain | dksu.top | High | Score 58/100 | First seen |
| Domain | mixcom.one | High | Score 58/100 | First seen |
| MD5 | 2f5c4325f77280b2b58be981f9051f04 | Medium | Score 53/100 | First seen |
| Domain | freebasic.cn | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…