ToxicPanda Android malware uses VPN permissions to block Google Play
A harmful Android app campaign called ToxicPanda has expanded its reach and now uses special phone permissions to interfere with Google Play, making it harder for people to spot, remove, or avoid dangerous apps. The threat appears to target many apps, increasing the chance that everyday Android users could be affected if they install untrusted software.
Who is at risk
Android phone or tablet users who install apps from unknown sources or grant unusual permissions to apps are most at risk.
What to watch for
Watch for apps asking for unusual control over your phone, problems opening or using Google Play, unexpected pop-ups, or your phone acting strangely after installing an app.
What to do
Immediately review recently installed apps, remove anything unfamiliar, only use trusted app stores, and restart your device after revoking suspicious app permissions.