Manic Android malware exfiltrates data via nearby devices

Manic Android malware targets 169 banking, government, crypto, and messaging apps, primarily in Ukraine. It uses Accessibility as a UI keylogger and exfiltrates encrypted data through nearby infected devices via Wi-Fi Direct or Bluetooth when C2 is unreachable. ThreatFabric analyzed the malware, active since February.