Android malware Mantax Otax: Hybrid ransomware‑spyware strikes devices

An unprecedented Android malware strain dubbed Mantax Otax has surfaced, merging ransomware encryption with spyware data exfiltration.

Android malware threat evolves with Mantax Otax

Victims report locked screens, files rendered unreadable, and relentless spam that bombards messaging apps. Encryption routine scrambles documents until a crypto‑payment is made, while a parallel module siphons contacts, photos, and authentication tokens. Security researchers observed that the payload can auto‑propagate via compromised ad networks, inflating infection counts to ↓ 12,000 devices in under a week.

Ransomware and spyware fusion

The dual‑purpose design complicates mitigation; traditional anti‑ransomware tools miss the covert data‑stealing component.

“We are witnessing a convergence of profit‑driven extortion and espionage,” said a senior analyst at Reuters.

Experts advise users to disable installations from unknown sources, maintain up‑to‑date patches, and monitor app permissions. Google has issued an emergency advisory, and Bloomberg notes that the cyber‑crime market may see a ↑ 3% surge in similar hybrid threats as criminal groups chase higher yields.

Words by: Nova Stirling

Aerospace & Space Tech Correspondent