TF-MAL-apk.droidlock

Description

ThreatFox malware family `apk.droidlock`. Printable name: DroidLock.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• DroidLock malware locks you out of your Android device and demands ...
  web:bladeintel.com

  DroidLock is delivered via phishing sites that trick users into installing a malicious app pretending to be, for example, a telecom provider or other familiar brand. The app is really a dropper that installs malware able to take complete control of the device by abusing Device Admin and Accessibility Services permissions.

  2026-05-23 22:29 UTC
• DroidLock Malware Locks Android Phones and Demands Ransom
  web:botcrawl.com

  DroidLock is a newly identified Android malware family designed to lock users out of their own devices and threaten irreversible data loss unless a ransom is paid. Unlike traditional ransomware, DroidLock does not rely on file encryption or recovery keys. Instead, it asserts control at the operating system level. Once active, an attacker can lock the screen, change PINs or unlock patterns ...

  2026-05-23 22:29 UTC
• DroidLock Android Malware Combines Ransomware and Full Remote Control
  web:cybersecurefox.com

  Security researchers at Zimperium have identified a new family of Android malware dubbed DroidLock . The threat stands out because it merges two dangerous capabilities: ransomware-style device locking and remote access trojan (RAT) functionality. Once installed, DroidLock can block access to the smartphone, demand a ransom, and at the same time give attackers near-complete control over the ...

  2026-05-23 22:29 UTC
• New DroidLock Malware Locks Android Devices and Demands a Ransom
  web:cybersecuritynews.com

  A dangerous new malware called DroidLock is targeting Android users, particularly in Spanish-speaking regions, through phishing websites. This threat combines ransomware tactics with remote-control capabilities, posing a severe risk to users of personal and corporate devices.

  2026-05-23 22:29 UTC
• DroidLock (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  According to Zimperium, DroidLock has the ability to lock device screens with a ransomware-like overlay and illegally acquire app lock credentials, leading to a total takeover of the compromised device. It employs deceptive system update screens to trick victims and can stream and remotely control devices via VNC. The malware also exploits device administrator privileges to lock or erase data ...

  2026-05-23 22:29 UTC
• New Android Malware Locks Device Screens and Demands a Ransom
  web:thecyberexpress.com

  A new Android malware locks device screens and demands that users pay a ransom to keep their data from being deleted. Dubbed " DroidLock " by Zimperium researchers, the Android ransomware-like malware can also "wipe devices, change PINs, intercept OTPs, and remotely control the user interface, turning an infected phone into a hostile endpoint." The malware detected by the researchers ...

  2026-05-23 22:29 UTC
• New DroidLock malware locks Android devices and demands a ransom
  web:www.bleepingcomputer.com

  A new Android malware called DroidLock has emerged with capabilities to lock screens for ransom payments, erase data, access text messages, call logs, contacts, and audio data.

  2026-05-23 22:29 UTC
• DroidLock malware locks you out of your Android device and demands ...
  web:www.malwarebytes.com

  Researchers have found Android malware that holds your files and your device hostage until you pay the ransom.

  2026-05-23 22:29 UTC
• DroidLock Malware (Android) - Malware removal instructions (updated)
  web:www.pcrisk.com

  Threats like DroidLock can typically be removed using reliable security software, including antivirus or anti- malware tools like Combo Cleaner, without losing your personal data. What are the biggest issues that malware can cause? Malware can carry out many harmful activities depending on its capabilities.

  2026-05-23 22:29 UTC
• How to avoid the nightmare Android malware that can hold your device ...
  web:www.tomsguide.com

  The DroidLock malware supports 15 commands that let it send notifications, place an overlay on the screen, mute the device, reset it to factory settings, start the camera or uninstall apps.

  2026-05-23 22:29 UTC

Only Available for Registered Users. Sign in to view.