New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
Brief
A newly discovered Android malware family named Manic combines banking fraud with full-scale spyware, and it comes with a trick researchers rarely see in the wild: when an infected phone has no internet connection of its own, it can quietly borrow one from another infected device nearby.
The malware was identified by ThreatFabric’s Mobile Threat Intelligence team, which describes Manic as sitting at the intersection of Android banking trojans and mobile spyware.
Rather than focusing on a single scam, Manic gives its operators a complete fraud toolkit : it can read a victim’s PIN, watch their screen live, hijack banking sessions, and pull files, messages, and location data off the device.