New DroidLock malware locks Android devices and demands a ransom

A Zimperium report details DroidLock, an Android malware family distributed via malicious websites posing as legitimate apps that uses a dropper to install a secondary payload. DroidLock requests Device Admin and Accessibility permissions to lock devices with a ransom overlay, steal lock patterns and sensitive data, enable remote VNC control, and perform destructive actions (wipe, change PIN); victims are targeted via side-loaded APKs and Spanish-language lures, and users are advised to avoid sideloading and use Play Protect.