Android malware called Mantax Otax has been found to be able to spy on WhatsApp messages and steal sensitive user data in Indonesia. This malware is spread through APKs outside the Google Play Store and traps victims with phishing techniques and social engineering. After being installed, Mantax Otax requests admin access and Accessibility Service to control almost all functions of the phone. In addition to spying on WhatsApp, this malware can also lock files and demand a ransom. Zimperium, the cybersecurity research team that discovered Mantax Otax, suspects the perpetrators are from Indonesia based on language indicators and victim file patterns.