Researchers from Kaspersky Lab have spotted a strain of known Android malware that now implements also ransomware-like abilities. Called Faketoken, the name suggests its primary feature is to steal login credentials by generating fake login screens for more than 2,000 financial applications. The researchers confirmed the number of victims exceeds 16,000 users, they observed infections in 27 countries, mostly in Russia, Ukraine, Germany, and Thailand. The Trojan is distributed under the guise of various programs and games, often imitating Adobe Flash Player.”]
Source: https://securityaffairs.co/wordpress/54563/cyber-crime/faketoken-ransomware-banker.html