Check Point Research learned of the return of Black Rose Lucy, also referred to as Lucy, after an Android malware researcher tweeted about it. The malware was masquerading as a video player application. The threat then used a service to fetch an array of the infected devices directories. Using this information, Lucy set to work encrypting all of the files stored in the identified arrays. This message informed victims that law enforcement officials had found pornographic content on their device and that they needed to pay a fine of $500 for investigators to dismiss their offense.”]