Symantec warned today that sixty-seven percent of Android devices are prone to a newly discovered ransomware variant.

The malware is called Android.Lockdroid.E and is delivered by clickjacking. The malware is disguised as a porn app called Porn ‘O' Mania. Once downloaded, the malware pulls up the phone's system activation dialogue. It then hides behind a fake window where it asks users to commence a package installation.

Using more fake window overlays, the malware tricks users into clicking on the button that grants admin rights to the malware. This clickjacking technique allows the malware to start a more aggressive intrusion and encrypt the users files. It not only encrypts, but it also locks the device, changes its PIN and deletes user data through a factory reset.

Source: SCMagazine