THost9

MantaxOtax keys its Android ransomware to each victim's Android ID

Zimperium's September 9 write-up describes an Indonesian-linked family that encrypts files and streams the screen at once, resolves its command server through a GitHub repository, and loses most of its encryption reach on Android 10.