This Android banking trojan uses a fake VPN prompt to silence Google's defenses

ToxicPanda 2.0 abuses Android VPN permissions to block Google Play Protect before stealing banking PINs. Here is how the malware works and how to stay safe.