Grandoreiro Continues to Operate Across Those Regions, While Toxicpanda 2.0 Has Expanded Its Reach, According to the Researchers

Security researchers have spotlighted new activity from three banking trojans — Manic, Grandoreiro, and ToxicPanda 2.0 — in reports from ThreatFabric, Acronis, and Zimperium. The Manic trojan, equipped with spyware capabilities, has been linked to a persistent Grandoreiro campaign targeting Latin America and Europe. Grandoreiro continues to operate across those regions, while ToxicPanda 2.0 has expanded its reach, according to the researchers.

The reports detail ongoing threats from these malware families, which are designed to steal banking credentials and sensitive data from victims. The findings were highlighted in a SecurityWeek article that also noted recent cybersecurity industry appointments, including Andrew Park as Chief Information Security Officer at UltraViolet Cyber, Patti Degnan in the same role at Glow, and Daniel Dubowski as Senior Vice President and Chief Information Security Officer at Marriott International. The article also referenced a webinar on detection-first security operations versus prevention in the age of AI, and a CodeSecCon event focused on secure coding practices and DevSecOps culture.