Loki Bot 2.0 Android Banker Botnet.rar -

: When it detects an attempt to revoke its administrator rights, it triggers a "Go_Crypt" function. This locks the device screen and attempts to encrypt files with AES-128, though researchers note this encryption is often faulty and only renames files.

To protect against or remove this malware, McAfee and Kaspersky recommend:

: Be wary of apps (especially those posing as Adobe Flash Player or system tools) that request excessive administrative or accessibility permissions. LokiBot - The first hybrid Android malware - Threat Fabric