Reported by 2 outlets
Manic Android malware family targets 169 apps with banking fraud and Wi-Fi mesh exfiltration
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
update from gbhackers.com
Manic Android Malware Targets 169 Apps, Steals PINs and Exfiltrates Data via Wi-Fi Mesh
gbhackers.com · 53d ago · August 21st, 2026
A newly discovered Android malware family called Manic, which combines banking fraud functions with advanced spyware and remote device control capabilities. The operation’s active infrastructure dates back to February 2026, with early wrappers and implants emerging in late May. Manic has rapidly evolved through July, incorporating stronger anti-analysis protections, in-memory DEX loading, lock-screen phishing, and […] The post New Manic Android Malware Targets 169 Apps, Steals PINs and Exfiltrates Data via Wi-Fi Mesh appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
Manic Android Malware Steals Banking PINs and Takes Remote Control of Devices
cyberpress.org · 53d ago · August 21st, 2026
ThreatFabric’s Mobile Threat Intelligence team says the threat is notable for an uncommon peer-relay mechanism that can exfiltrate stolen data via nearby compromised phones when a victim device lacks a direct internet connection. Manic has been active since at least February 2026, with infrastructure and development activity expanding through spring. Manic Android Malware Steals Banking PINs By July, operators had introduced a more advanced build featuring stronger anti-analysis checks, in-memory DEX loading, and lock-screen credential phishing . The malware monitors 169 Android package IDs across banking, payment, cryptocurrency, government identity, authentication, email, browser, and messaging applications. Data stealer and Device Takeover (DTO) Flow (Source: Threat Fabric) Ukraine appears to be the primary target, with coverage of Ukrainian banks, eID services, and messaging tools. However, its target list also includes services used in Russia, Poland, Germany, the Czech Republic, Slovakia, the UK, and other European countries, as well as global fintech and crypto platforms. Unlike conventional Android banking trojans, Manic does not always rely on a full-screen fake login overlay to steal credentials. Instead, it can abuse Android Accessibility permissions to place a transparent layer over the numeric keypad inside a legitimate bank