Mantax Otax Malware: Ransomware and Spyware Threatens Android Users in Indonesia

• •Mantax Otax combines ransomware and spyware, targeting Android devices.
• •The malware can steal sensitive data, including SMS, OTPs, and chat messages.
• •It is distributed through unverified APKs and exploits social engineering tactics.

A new malware named Mantax Otax has emerged, targeting Android users in Indonesia. It combines ransomware and spyware capabilities, allowing it to lock devices and steal sensitive information such as SMS, OTP codes, and chat messages from apps like WhatsApp and Telegram. The malware is distributed through sideloaded APKs from unverified sources, exploiting social engineering tactics to trick users into installation. Researchers from Zimperium identified two variants of the malware, V1 and V2, which have been confirmed to request sensitive permissions upon installation. Users are advised to be cautious of unsolicited app downloads and to ensure device security. The malware's capabilities include screen recording and photo capture, posing a significant risk to personal data privacy. Currently, there are no reports of widespread active exploitation, but the potential for harm remains high.