New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

The report describes Mantax Otax, an Android malware campaign delivered via sideloaded APKs that combines ransomware (AES file encryption on older Android versions) with extensive espionage capabilities — screen recording via MediaProjection, hidden camera photos, SMS/notification monitoring to steal OTPs, and Accessibility abuse to access chats and PINs — and includes at least one active C2 domain (https://apimantax.otax.fun).