Archynetys Live news trend intelligence
◼ Archived Technology 🔮 Archynetys predicts: fades by tomorrow — graded ✓ correct

New Android malware encrypts files, steals data, and harasses victims

A new Android ransomware that records screens, steals OTPs and snaps photos is targeting users, sparking urgent warnings.

By · Published September 13, 2026  18:12 UTC · Updated September 13, 2026  22:40 UTC

7sources
8articles
5velocity
+0%since first seen
45d agofirst detected
Text:
🤖 AI Dossier

Evidence dossier

Intelligence passport

72/100 Excellent
7distinct sources shown
40velocity measurements
2language editions checked
All brief claims passed the second-source checkbrief evidence status

Measured timeline

The coverage curve

How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →

🌍 Language by language

Archynetys detected this story across 2 language editions of the world's news.

🇬🇧 English Sep 11, 17:24 UTC
🇧🇷 Portuguese Sep 12, 11:00 UTC · Estadão

Detected by matching proper nouns and figures that survive translation. Times reflect when each edition's coverage was first indexed.

The story so far

⚡ Executive Intelligence Takeaways Corroborated across 7 independent newsrooms
  • Velocity & Diffusion: Coverage exploded across 7 distinct news outlets with 8 published articles, achieving a live velocity of 5.
  • Primary Driver: A new Android ransomware that records screens, steals OTPs and snaps photos is targeting users, sparking urgent warnings.
  • Predictive Outlook: Archynetys algorithmic models forecast this story will fade from trending status over the next 24 hours.
  • Source Integrity: Verified strictly against primary headline reporting under zero-hallucination protocols.

CyberSecurityNews first detailed a novel Android ransomware that encrypts files, records screens, steals one‑time passwords and covertly captures photos of victims. The report flagged immediate risk to Android device owners, noting the malware’s capacity to lock data while simultaneously spying on users. Researchers identified the threat as a direct financial and privacy hazard for mobile users, especially those in regions where the code originated. Subsequent coverage expanded the profile.

HotHardware and Zimperium named the strain Mantax (also referenced as MantaxOtax or Mantax Otax), describing it as an Indonesian‑origin ransomware that embeds spyware components. Infosecurity Magazine highlighted the dual ransomware‑spyware functionality, and India Today reported the ability to monitor WhatsApp communications and harass victims after encryption. The combined findings underscore a sophisticated “cocktail” of extortion and surveillance tactics. Outlets differ on the exact nomenclature, with CyberSecurityNews and BleepingComputer using “new Android malware,” while others adopt variations of Mantax‑related labels, creating minor naming inconsistencies.

Despite the terminology gap, all sources agree the malware is active and poses a multi‑vector threat. Researchers continue to monitor its spread, urging users to update devices and employ security tools as defenses evolve.

Synthesized by Archynetys from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 43d ago.

Coverage (8)

The obvious questions

What name(s) have been used for the new Android malware?

The malware has been reported under several names, including “Mantax,” “MantaxOtax” and “Mantax Otax,” with some outlets simply referring to it as new Android ransomware.

What capabilities does the malware possess?

It encrypts files, records screens, steals one‑time passwords, captures photos, monitors WhatsApp messages and can harass victims after encryption.

Which users are most at risk?

Android device users, particularly those in Indonesia where the code originated, are the primary targets according to the reports.

📊 AUDIENCE & LONGEVITY PULSE

How do you expect this trend to evolve over the next 24 hours?

Cast your vote to register reader intelligence on the velocity and trajectory of this coverage.

Select an assessment to vote. Verified Reader Intelligence

Topics

Android Malware Ransomware Indonesia Cybersecurity

Related trends

▲ Peaking Business

Tyler Cowen: How to Outrun the AI Hackers

AI hackers are increasingly using advanced technology to evade detection, forcing companies to rethink their cybersecurity strategies.

10 sources 10 articles v 8 4h ago

Open prediction lab

Can you beat the machine?

Pick tomorrow's top trend, then compare your result with Archynetys's self-graded forecast.

Make a prediction →