New Manic Android malware can exfiltrate data through nearby devices

A newly documented Android malware family named Manic has targeted users across multiple European countries (with a primary focus on Ukraine) since at least February, combining spyware, banking fraud, and remote control. Manic abuses Accessibility and notification permissions to capture PINs, SMS codes and app inputs using transparent overlays and UI keylogging, and implements a resilient exfiltration channel that can relay encrypted stolen data via nearby infected devices over Wi‑Fi Direct or Bluetooth (including multi‑hop relays) when direct C2 is unavailable.