{"id":419,"date":"2018-05-11T17:29:35","date_gmt":"2018-05-11T17:29:35","guid":{"rendered":"https:\/\/kasperskycontenthub.com\/threatpost\/?p=131911"},"modified":"2018-05-11T17:29:35","modified_gmt":"2018-05-11T17:29:35","slug":"panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/","title":{"rendered":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets"},"content":{"rendered":"<div class=\"media_block\"><\/div>\n<p>The Panda banking trojan, a spin-off from the infamous Zeus malware, is widening its net to attack more than just financial services targets, as seen in three ongoing campaigns discovered in May.<\/p>\n<p>The Windows-focused Panda is far from the cuddly thing its name would suggest. It has a full arsenal of attack techniques, which include web injects, taking screenshots (up to 100 per mouse-click), keylogging, the ability to grab passwords from the clipboard and paste them into form fields and exploits for the Virtual Network Computing desktop-sharing system.<\/p>\n<p>First <a href=\"https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/panda-banker-new-banking-trojan-hits-the-market\">seen in 2016<\/a> as one of the many variants that cropped up in the wake of the Zeus source code <a href=\"https:\/\/threatpost.com\/zeus-source-code-leaked-051011\/75217\/\">being leaked<\/a>, Panda has more than adequately fulfilled its function as a banking trojan since then, looking to harvest and use credentials for online banking, payment and other financial portals.<\/p>\n<p><strong>Three New Active Campaigns<\/strong><\/p>\n<p>However, in three active campaigns spotted this month by F5 Labs, Panda has been observed attacking online cryptocurrency exchanges and brokerage services, social media and adult sites, among others. F5 researcher Doron Voolf postulated that the sheer size of these other industries translates to a siren song of potential revenue generation for fraudsters.<\/p>\n<p>\u201cAdult sites were also targeted by Panda\u2026 We have been seeing an expansion of banking trojan targets into other industries that collect payment information and other forms of personally identifiable information (PII), so this behavior is not surprising,\u201d he said, in an <a href=\"https:\/\/f5.com\/labs\/articles\/threat-intelligence\/malware\/panda-malware-broadens-targets-to-cryptocurrency-exchanges-and-social-media\">analysis<\/a> posted on Wednesday. \u201c[T]his behavior is not surprising given the size of the adult industry and potential revenue generation for fraudsters.\u201d<\/p>\n<p>All three of the <a href=\"https:\/\/media.kasperskycontenthub.com\/wp-content\/uploads\/sites\/31\/2018\/05\/11122028\/panda-targets-2018.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright size-medium wp-image-131912\" src=\"https:\/\/media.kasperskycontenthub.com\/wp-content\/uploads\/sites\/31\/2018\/05\/11122028\/panda-targets-2018-300x190.png\" alt=\"\" width=\"300\" height=\"190\"\/><\/a>offensives (active in the U.S., Japan and Latin America) are propagating via Facebook and Twitter phishing attacks, and all three have added the same new targets to the mix, the researchers noted. However, there are different C2s for each campaign. Two of the attacks are acting from the same botnet version. Botnet 2.6.8 was found spreading Panda in both the U.S. and Japan.<\/p>\n<p>The U.S. campaign so far has targets in eight industries. While 76 percent of the attacked services are for U.S. financial organizations such as Citibank and Wells Fargo, the actors behind the campaign have also added half a dozen Canadian financial organizations as targets. That\u2019s followed notably by cryptocurrency sites. Also targeted are global social-media providers Facebook and Instagram along with MSN and Bing.com, payroll companies, entertainment services (YouTube) and others, Voolf said.<\/p>\n<p>\u201cThis campaign also targets the ecommerce giant Amazon; entertainment platform Youtube; Microsoft.com, Live.com, Yahoo.com, Google.com, likely targeting email accounts; the social media leaders Facebook and Twitter; as well as a Japanese adult site Dmm[.]co, and Pornhub,\u201d researchers wrote.<\/p>\n<p>In both of the initiatives, F5 said that the registrant is via a known threat actor network in Russia, and the domain for the email contact is bk.ru, which is owned by ASN 47764 \u2013 an entity that Voolf said continually comes up in F5\u2019s threat research.<\/p>\n<p>As for the Latin American campaign, it\u2019s primarily focused on banks in Argentina, Columbia and Ecuador. That is followed by similar social media targets (Facebook, Twitter, Instagram and Flickr) as well as\u00a0MSN, Bing.com, YouTube and Microsoft.<\/p>\n<p>F5 said the botnet behind the Latin American campaign is called Cosmos3. Researchers note, while the domain is registered in China, the email registrant domain is GMZ.com and resolves to the German service provider 1&amp;1.<\/p>\n<p>Across all three campaigns, just 64 percent of targets were financial services targets.\u00a0Cryptocurrency exchanges made up 26 percent. That\u2019s a big change for this kind of malware, Voolf said.<\/p>\n<p>\u201cThis is the first [Panda] campaign we have seen targeting cryptocurrency sites, but it\u2019s a move that makes sense, given the popularity of <a href=\"https:\/\/threatpost.com\/crooks-switch-from-ransomware-to-cryptocurrency-mining\/129229\/\">cryptocurrency<\/a>,\u201d he concluded. \u201cThis act of simultaneous campaigns targeting several regions around the world and industries indicates these are highly active threat actors, and we expect their efforts to continue with multiple new campaigns coming out as their current efforts are discovered and taken down.\u201d<\/p>\n<p>Panda isn\u2019t the first banking trojan to turn its interest to cryptocurrency; IBM X-Force noted in February that the <a href=\"https:\/\/threatpost.com\/spam-domains-imitating-popular-banks-spreading-trickbot-banking-trojan\/127447\/\">TrickBot trojan<\/a> has been diversifying its interests as well.<\/p>\n<p> Read More <a href=\"https:\/\/threatpost.com\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/131911\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Panda banking trojan, a spin-off from the infamous Zeus malware, is widening its net to attack more than just financial services targets, as seen in three ongoing campaigns discovered in May. Read More HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":420,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[3],"tags":[301,21,302,28,303,304,74,305,69,268],"class_list":["post-419","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-threatpost","tag-banking-trojan","tag-cryptocurrency","tag-expansion","tag-malware","tag-ongoing-campaign","tag-panda","tag-porn","tag-targets","tag-web-security","tag-zeus"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-11T17:29:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"190\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets\",\"datePublished\":\"2018-05-11T17:29:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/\"},\"wordCount\":708,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png\",\"keywords\":[\"banking trojan\",\"Cryptocurrency\",\"expansion\",\"Malware\",\"ongoing campaign\",\"panda\",\"porn\",\"targets\",\"Web Security\",\"Zeus\"],\"articleSection\":[\"Threatpost\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/\",\"name\":\"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png\",\"datePublished\":\"2018-05-11T17:29:35+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png\",\"width\":300,\"height\":190},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"banking trojan\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/banking-trojan\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/","og_locale":"en_US","og_type":"article","og_title":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-05-11T17:29:35+00:00","og_image":[{"width":300,"height":190,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets","datePublished":"2018-05-11T17:29:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/"},"wordCount":708,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png","keywords":["banking trojan","Cryptocurrency","expansion","Malware","ongoing campaign","panda","porn","targets","Web Security","Zeus"],"articleSection":["Threatpost"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/","url":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/","name":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png","datePublished":"2018-05-11T17:29:35+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets.png","width":300,"height":190},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/panda-banking-trojan-diversifies-into-cryptocurrency-porn-other-targets\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"banking trojan","item":"https:\/\/www.threatshub.org\/blog\/tag\/banking-trojan\/"},{"@type":"ListItem","position":3,"name":"Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/419","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=419"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/419\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/420"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=419"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=419"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=419"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}