What happened: Security researchers have uncovered "Manic," a sophisticated new Android malware targeting financial apps, messaging platforms, and crypto wallets. Manic uses Android's Accessibility services to log keystrokes, overlaying a transparent layer to steal PINs and recovery phrases directly. Most alarmingly, if an infected device is disconnected from the internet, Manic can still exfiltrate stolen data by hopping through nearby infected devices using Bluetooth and Wi-Fi Direct.
Why it matters: For crypto investors, this malware represents a significant threat to self-custody. Traditional defense mechanisms like turning off cellular data or Wi-Fi are no longer foolproof if other compromised devices are nearby. With Manic actively targeting crypto wallets and exchanges, users must be extremely cautious about downloading unofficial APKs and granting Accessibility permissions to unknown apps.
