A new Android ransomware dubbed DroidLock has been identified that propagates via phishing websites. It tricks victims by deploying a fake system update screen. DroidLock can bypass Android restrictions to lock the device, erase data, steal credentials through fake login overlays, capture screen activity, activate the device camera and capture victim's image, and uninstall applications.