New Android Malware Mantax Otax Can Steal OTPs and Spy on WhatsApp
Researchers have warned about Mantax Otax, a dangerous Android malware capable of stealing OTPs, spying on chats, recording screens and disrupting infected devices.
Researchers have warned Android users about a new malware called Mantax Otax that can steal OTPs, monitor WhatsApp and Telegram activity, access sensitive device information and even remotely disturb victims with pop-ups, videos and unsettling audio.
The malware has reportedly been distributed through malicious APK files hosted on third-party platforms, as well as phishing links, messaging services and social-engineering campaigns. Once installed, it seeks powerful permissions such as Accessibility access and device administrator privileges, allowing attackers to control various functions of an infected phone.
Mantax Otax can reportedly read SMS notifications containing one-time passwords, collect contacts, call logs, browser history, location data and Google account information. By abusing Android's Accessibility features, it can also access WhatsApp and Telegram content. Researchers found that the malware can take screenshots, record or stream the screen and secretly activate the phone's cameras.
A newer version, Mantax Otax v2, reportedly includes features intended to intimidate victims, including repeated pop-ups, full-screen videos, jumpscare images and remotely triggered text-to-speech messages. It can also block access to the device screen.
Older Android devices running Android 9 or earlier face an additional ransomware risk, as the malware can encrypt files stored on the device. Newer Android versions limit this capability but remain vulnerable to its spyware functions.
Users should avoid unknown APKs, be cautious about granting Accessibility permissions and keep Google Play Protect and device software updated.
