This Android Malware Can Steal Data Through Nearby Phones

Emily Davis · 2026-08-20

You might think your phone is safe because you didn't click a suspicious link or install a random APK. But a newly discovered Android malware called Manic is turning that assumption on its head. It has a nasty fallback trick: if it can't send stolen data directly to its command center, it can quietly pass that data to another infected phone sitting nearby. ### How Manic Spreads and What It Does Manic isn't your average piece of adware. It's a full-featured remote access trojan (RAT) that gives attackers deep control over your device. Once it's in, it can grab your contacts, read your text messages, log your keystrokes, and even take screenshots. It can also hijack your camera and microphone, turning your phone into a surveillance tool without you ever knowing. The malware is currently targeting users in several European countries, but the technique is a wake-up call for everyone. Security researchers have noted that Manic is particularly sneaky because it doesn't rely on a single, always-on internet connection to exfiltrate your data. If the Wi-Fi or cellular connection drops, or if the attacker's server goes offline, Manic switches to a local mesh network. ### The Nearby Device Trick Here's where it gets interesting. Manic uses Bluetooth and Wi-Fi Direct to scan for other devices that are already infected with the same malware. When it finds one, it creates a peer-to-peer connection and hands off the stolen data like a relay runner passing a baton. That second device then stores the data until it has a stable internet connection, at which point it uploads everything to the attacker's server. This is a clever workaround. It means the malware doesn't need a constant connection to the internet to be effective. It can hop from phone to phone, creating a chain of compromised devices that eventually funnel data back to the bad guys. Think of it like a group of people passing a secret note across a crowded room, each person only passing it to someone they know is in on the plan. ### Why This Matters for Your Privacy For the average user, this highlights a scary reality: your data isn't just at risk when you're online. Even if your phone is offline for a few hours, Manic can still be collecting and storing your information, waiting for the right moment to send it off. And because it can use nearby devices as relays, it's much harder for security teams to trace the data's path back to the original attacker. This also means that proximity matters. If you're sitting in a coffee shop and someone nearby has an infected phone, your phone could become a temporary storage hub for their stolen data, even if your own device is clean. You wouldn't even know it's happening. ### What You Can Do to Protect Yourself - **Stick to official app stores.** Only download apps from the Google Play Store, and even then, check the developer's reputation and read reviews carefully. - **Keep your phone updated.** Android security patches fix known vulnerabilities that malware like Manic exploits. Don't delay those updates. - **Review app permissions.** If an app asks for access to your contacts, camera, or microphone and it has no business needing them, deny the request. - **Turn off Bluetooth and Wi-Fi when you're not using them.** This reduces your phone's visibility to nearby devices scanning for targets. - **Use a reputable mobile security app.** A good antivirus can catch known strains of malware before they take root. ### The Bottom Line The Manic malware is a reminder that cyber threats are getting more sophisticated. The days of simply avoiding sketchy downloads are gone. Attackers are now using creative methods to move your data, and they're not afraid to use other people's phones as stepping stones. Staying vigilant with basic security hygiene is your best defense. If you're managing a team of remote workers or handling sensitive client data, this is a good time to double-check your mobile device management policies. A single infected phone in a crowded office could become a silent relay for stolen information, and you'd never see it coming.