New 'Manic' Android Malware Blends Banking Fraud with Spyware Tactics

Security researchers have identified a new strain of Android malware known as Manic that is actively targeting a wide range of victims, including Ukrainian banks, government and identity services, and popular messaging applications. The malware has also been observed hitting Russian and European financial institutions, global fintech and cryptocurrency platforms, and military-related communication tools.

What makes Manic notable is its hybrid design: it combines the characteristics of traditional Android banking malware with mobile spyware features. This means the malware isn't just after financial credentials—it appears capable of broader surveillance and data theft from infected devices, making it a more versatile and dangerous threat than typical banking trojans.

While Manic currently appears focused on specific regions and sectors, Australian businesses—particularly those in fintech, cryptocurrency, or with staff using messaging apps for work—should treat this as a reminder that mobile devices are an increasingly attractive target for sophisticated attackers blending multiple attack techniques into a single piece of malware.