ToxicPanda Android malware expands targeting and adds VPN-based Google Play blocking

The ToxicPanda Android malware has significantly upgraded its capabilities, now targeting 349 applications and supporting 167 remote commands. The malware leverages VPN permissions to intercept network traffic and block access to Google Play, complicating detection and remediation efforts.