Manic Android Malware Relays Banking Data Even Offline

Manic is a newly identified Android malware strain targeting banking, digital-payment and cryptocurrency-wallet applications, according to cybersecurity firm ThreatFabric. It uses touch overlays and Android accessibility services to capture PINs and verification codes, potentially giving attackers the credentials needed to access accounts or authorize transactions. The focus on financial apps makes the campaign a direct threat to users’ money and digital assets.

ThreatFabric said Manic can relay stolen information between infected devices using Wi-Fi Direct and Bluetooth. Data may therefore move through nearby compromised phones before reaching an internet-connected device, leaving information exposed even when an individual handset is offline. The technique means disconnecting mobile data or conventional Wi-Fi alone may not halt exfiltration once a device has been infected and joined the malware’s local relay network.