Cyber fraud cases are rapidly increasing in India. Cybercriminals are now using new technologies to defraud people. Furthermore, fraudsters are using innovative methods to deliver malware to phones. Therefore, if you have an unknown APK file or suspicious app on your phone, you should be alert immediately. Cybersecurity researchers have discovered a new Android malware called Mantax Otax that goes beyond stealing phone data.
Mantax Otax’s most worrying capability is its spying capabilities. It can read SMS and notifications received on infected devices. This means that attackers can also access One-Time Passwords (OTPs) sent for banking or other online accounts.
Not only this, the malware can exploit Android’s Accessibility feature to read WhatsApp profile information and chat messages. Telegram information and chat history are also targeted. This means that if the phone is infected, the user’s personal conversations may also be at risk.
Mantax Otax also possesses ransomware-like capabilities. Especially on devices running Android 9 or older, it can encrypt photos, videos, documents, and other files stored in the phone’s storage. Users may then face demands from attackers to access their files.
Security features like Scoped Storage in Android 10 and later significantly limit access to files. However, this doesn’t mean that newer Android phones are completely safe, as the malware’s spying and data-stealing powers can still be exploited.
It’s worth noting that this malware’s capabilities aren’t limited to just reading messages. According to researchers, it can exploit Android’s MediaProjection feature to take screenshots, record the screen, and monitor device activity live.
It can also gather valuable information on the phone, such as photos, files, contacts, call logs, browser history, and location.
The new version of Mantax Otax not only steals data but can also interfere with the use of an infected phone. Research has found features that can repeatedly display pop-ups, block the screen, and prevent certain apps from opening. Attackers can even play their own voice or messages through the phone’s speakers.
How to Protect Your Android Phone
The easiest way to avoid this threat is to avoid downloading APKs from unknown websites, Telegram channels, WhatsApp links, or suspicious messages. It’s important to thoroughly check before granting an app powerful permissions like Accessibility or Device Administrator.
Always keep your phone’s Android version and security updates up to date. Don’t turn off Google Play Protect, and if you notice any unknown app has unnecessary permissions, consider removing it immediately.