Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Manic Android Malware Steals Banking PINs and Takes Remote Control of Devices
Threat Actors
Malware Families
Excerpt
A newly identified Android malware family dubbed Manic combines banking fraud, spyware, and remote-access capabilities in a single platform. ThreatFabric’s Mobile Threat Intelligence team says the threat is notable for an uncommon peer-relay mechanism that can exfiltrate stolen data via nearby compromised phones when a victim device lacks a direct internet connection. Manic has been active since at least February 2026, with infrastructure and development activity expanding…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 2fb5b01ea5a483d60b659e85327a53c6661bdd630d4afd93dc5fe0941d3ccbbe | Medium | Score 55/100 | First seen |
| SHA256 | feea425cde1223fe7afdd7a1ea631678ec6282f6cc20c3d3c0fb97cdbcf65b9b | Medium | Score 55/100 | First seen |
| SHA256 | e7abc375f24d0dd2419e0bce4686c7301b3ee82ae38906c67d3481580f6c648e | Medium | Score 55/100 | First seen |
| SHA256 | 80be0942d0e20b5006e240434f42512c8b3cd0d54eee858a25663c1a4224a576 | Medium | Score 55/100 | First seen |
| SHA256 | 2884108b35eba7b8099087405653c1b23c3839f0d5058c4d61341fc31cfc6040 | Medium | Score 55/100 | First seen |
| SHA256 | 7c12f1237090e32c18583f66f1a9e44b029ad7c1e61179e1d524fb3093abd59a | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…