android malware
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
A new Android malware strain named Manic has been identified, exhibiting capabilities of both banking Trojans and spyware. It targets financial institutions, government services, and messaging applications across Ukraine, Russia, and Europe. A unique feature allows infected devices to relay stolen data through other compromised devices via Wi-Fi Direct, Bluetooth, or BLE, even if the initial device lacks internet access.
Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools
A new Android spyware operation called RedWing, linked to Russian threat actors, is being offered as a subscription service on Telegram. This Malware-as-a-Service (MaaS) product requires no coding skills and allows attackers to rent tools for stealing credentials, intercepting SMS messages, recording audio and video, and even launching DDoS attacks. RedWing relies on social engineering and user-granted permissions rather than exploiting device vulnerabilities.