New Android malware encrypts files, steals data, and harasses victims
New Android malware Mantax Otax combines ransomware and spyware, encrypting files and stealing data.
A new Android malware strain, Mantax Otax, has been identified that combines ransomware and spyware capabilities. Distributed via malicious APKs outside of Google Play, it targets older Android versions (9 and below) by encrypting files and demanding ransom. It also steals sensitive data, captures screenshots, records video, and harasses victims with intrusive pop-ups and audio messages.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Mantax Otax malware exploits a combination of user behavior and unpatched software by targeting Android devices running version 9 or older through malicious APKs distributed outside the official Google Play Store. The root problem is twofold: users are sideloading untrusted applications, and outdated Android versions lack modern security mitigations. This hybrid threat is particularly dangerous because it simultaneously encrypts files for ransom, exfiltrates sensitive data, and conducts active surveillance — meaning victims face financial, privacy, and psychological harm. Organizations and individuals who fail to keep mobile devices updated or restrict app sources create easy entry points for sophisticated mobile threats.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Mantax Otax