{"id":270904,"date":"2026-08-21T16:05:10","date_gmt":"2026-08-21T16:05:10","guid":{"rendered":"https:\/\/www.europesays.com\/ro\/270904\/"},"modified":"2026-08-21T16:05:10","modified_gmt":"2026-08-21T16:05:10","slug":"toxicpanda-2-0-ataca-peste-140-de-aplicatii-bancare-si-crypto-europa-este-deja-pe-harta-malware-ului","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ro\/270904\/","title":{"rendered":"ToxicPanda 2.0 atac\u0103 peste 140 de aplica\u021bii bancare \u0219i crypto; Europa este deja pe harta malware-ului"},"content":{"rendered":"<p>ToxicPanda 2.0 revine pe Android mult mai agresiv \u0219i vizeaz\u0103 acum sute de aplica\u021bii financiare. Noua variant\u0103 a troianului bancar poate \u00eencerca s\u0103 fure PIN-uri din peste 140 de aplica\u021bii bancare \u0219i crypto, iar mecanismul s\u0103u de phishing acoper\u0103 349 de aplica\u021bii \u0219i servicii financiare din 16 \u021b\u0103ri. <a href=\"https:\/\/www.phonearena.com\/news\/hackers-found-a-way-into-140-banking-apps-heres-how-you-might-be-helping-them\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">PhoneArena<\/a> noteaz\u0103 \u0219i apari\u021bia a 167 de comenzi pentru control de la distan\u021b\u0103, semn c\u0103 nu mai vorbim doar despre un ecran fals pus peste aplica\u021bia b\u0103ncii.<\/p>\n<p>ToxicPanda 2.0 poate abuza de Android Accessibility Services pentru a citi ce apare pe ecran \u0219i pentru a simula ap\u0103s\u0103ri. Mai grav, malware-ul poate activa Developer Options \u0219i Wireless Debugging, folosind apoi Android Debug Bridge pentru a ob\u021bine acces mai extins la telefon. Poate afi\u0219a interfe\u021be false peste aplica\u021biile legitime pentru a captura date de autentificare \u0219i chiar codul de blocare al telefonului. <a href=\"https:\/\/www.prnewswire.com\/news-releases\/zimperium-zlabs-uncovers-toxicpanda-2-0--a-significantly-more-powerful-android-banking-trojan-302854782.html\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Zimperium<\/a> confirm\u0103 extinderea la 349 de \u021binte financiare din 16 \u021b\u0103ri \u0219i cele 167 de comenzi remote.<\/p>\n<p style=\"text-align:center\"><a href=\"https:\/\/www.europesays.com\/ro\/wp-content\/uploads\/2026\/08\/chart-of-the-affected-users-by-c.jpg\" style=\"text-align: center;\"><img decoding=\"async\" alt=\"\" src=\"https:\/\/www.europesays.com\/ro\/wp-content\/uploads\/2026\/08\/chart-of-the-affected-users-by-c.jpg\" style=\"height:367px; width:592px\"\/><\/a><\/p>\n<p>Europa nu este str\u0103in\u0103 de ToxicPanda. Versiunea anterioar\u0103 a malware-ului a infectat peste 1.500 de dispozitive, cu Italia drept principal focar, urmat\u0103 de Portugalia \u0219i Spania, iar <a href=\"https:\/\/www.cleafy.com\/cleafy-labs\/toxicpanda-a-new-banking-trojan-from-asia-hit-europe-and-latam\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Cleafy a identificat victime \u0219i \u00een Fran\u021ba<\/a>. Cercet\u0103torii au indicat \u0219i Germania, respectiv Marea Britanie printre \u021bintele europene probabile ale campaniei. Pentru ToxicPanda 2.0 \u0219tim c\u0103 sunt vizate 16 \u021b\u0103ri, \u00eens\u0103 lista complet\u0103 nu a fost f\u0103cut\u0103 public\u0103, a\u0219a c\u0103 nu exist\u0103 \u00een acest moment o confirmare c\u0103 Rom\u00e2nia se afl\u0103 printre ele.<\/p>\n<p>Partea bun\u0103 este c\u0103 atacul are nevoie, \u00een mare m\u0103sur\u0103, ca utilizatorul s\u0103-i deschid\u0103 u\u0219a. ToxicPanda este distribuit prin aplica\u021bii \u0219i ecrane de instalare \u00een\u0219el\u0103toare, iar solicit\u0103ri suspecte pentru acces VPN, Accessibility, administrarea dispozitivului sau instalarea unui APK din afara magazinului oficial ar trebui tratate cu mult\u0103 pruden\u021b\u0103.<\/p>\n<p>Tehnica nu este nou\u0103: am mai scris despre <a href=\"https:\/\/www.mobilissimo.ro\/stiri-telefoane\/aplicatii-cu-peste-1-miliard-de-descarcari-din-google-play-store-tintite-de-malware-bancare-iata-ce-troieni-le-iau-la-tinta\" rel=\"nofollow noopener\" target=\"_blank\">troieni Android care suprapun pagini false peste aplica\u021biile bancare<\/a> \u0219i despre <a href=\"https:\/\/www.mobilissimo.ro\/stiri-telefoane\/troianul-android-crocodilus-se-extinde-in-europa\" rel=\"nofollow noopener\" target=\"_blank\">Crocodilus, un alt malware bancar extins \u00een Europa<\/a>. Doar c\u0103 ToxicPanda 2.0 duce lucrurile mai departe: \u00eencearc\u0103 nu numai s\u0103 afle parola, ci s\u0103 transforme telefonul \u00eentr-un dispozitiv controlabil de la distan\u021b\u0103.<\/p>\n","protected":false},"excerpt":{"rendered":"ToxicPanda 2.0 revine pe Android mult mai agresiv \u0219i vizeaz\u0103 acum sute de aplica\u021bii financiare. Noua variant\u0103 a&hellip;\n","protected":false},"author":2,"featured_media":270905,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[16],"tags":[274,74838,74837,41,40,38,39,17721,6134,141,124,74836,6298],"class_list":["post-270904","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tehnologie","tag-android","tag-aplicatii-bancare","tag-malware-android","tag-ro","tag-romana","tag-romania","tag-romanian","tag-securitate-android","tag-securitate-cibernetica","tag-technology","tag-tehnologie","tag-toxicpanda-2-0","tag-troian-bancar"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ro\/117134355880199874","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/270904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/comments?post=270904"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/270904\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media\/270905"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media?parent=270904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/categories?post=270904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/tags?post=270904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}