Manic Android Banking Trojan
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·54VzBC…dQcbSummary
Manic is an active Android malware family first identified by ThreatFabric and Kaspersky in 2026, combining banking-trojan credential theft, spyware, and remote device takeover. It targets 169 Android application package IDs including cryptocurrency wallets, exchanges, banks, authenticators, and government eID services, and employs a novel offline Wi-Fi mesh relay to exfiltrate stolen data through chains of nearby infected devices even without direct internet access. Primary targeting is concentrated on Ukraine, with secondary reach across Russia, Europe, and global fintech and cryptocurrency platforms.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(6 events)
1 February 2026
First Manic-associated infrastructure domains registered, per ThreatFabric analysis.
ThreatFabric1 May 2026
First retained Manic wrapper and implant samples appear in late May 2026, using a booking-app lure.
ThreatFabric / The Hacker News13 July 2026
Updated Manic wrapper deployed with in-memory DEX loading, enhanced anti-analysis protections, lock-screen secret phishing, and launcher-hiding behavior.
ThreatFabric / The Hacker News24 July 2026
Manic C2 infrastructure confirmed live, with panel and API active through approximately July 28, 2026.
ThreatFabric / The Hacker News22 August 2026
ThreatFabric publishes full technical disclosure of Manic. Kaspersky publishes parallel analysis. SecurityWeek, The Hacker News, Security Affairs, and other outlets report on the disclosure.
ThreatFabric / SecurityWeekDecision Log
- slot 448470725 · hash DncA7Q5eapjySPJdDgCW9tA5y4eH7C4qbRLwMiZLcHni
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 5 of 6 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/19/2026, 5:08:42 PM
last updated: 9/19/2026, 5:08:42 PM
1 viewavoid.net — verified advice for a post-truth world