Android users are being cautioned to remain alert and be wary of a new alarming cyber threat. This recent danger is particularly concerning as it locks phones once infiltrated, demanding a ransom to regain access or risk permanent file destruction.

Identified as DroidLock, the threat was discovered by the security team at Zimperium and is impacting Android users in certain parts of Europe. The malware is currently being disseminated through malicious websites that promote counterfeit applications mimicking legitimate software. Upon installation, DroidLock seizes full control of phones, monitoring unlock codes entered by users.

Once hackers obtain this data, they can alter the code and lock users out of their devices. Subsequently, some victims receive a ransom demand via a screen overlay, threatening file deletion if payment is not made within a specified timeframe.

Zimperium stated, “The ZLabs research team has detected a new threat campaign targeting Android users.” Described as ransomware, DroidLock spreads through phishing websites, locking screens with a ransomware-like overlay and illicitly acquiring app lock credentials, resulting in a complete takeover of compromised devices.

The malware deceives victims with fake system update screens and can remotely control devices using VNC. It also utilizes device administrator privileges to lock or erase data, capture images with the front camera, and mute devices.

While DroidLock has not yet reached the UK, Android users are advised to remain cautious. To safeguard against such threats, it is crucial for all Android users to exclusively download applications from official sources like Google’s Play Store. Individuals urged to sideload software from websites should verify the developer’s authenticity and refrain from downloading suspicious content.

Exercise vigilance and exercise caution before installing any software on your Android device.