Android users are being urged to stay on high alert as a troubling new cyberattack has emerged. The new threat, known as DroidLock, can completely lock an infected device, rendering it completely inaccessible to owners. What makes things even more concerning is that a ransom is demanded, and those who don't pay are threatened with having their files permanently wiped.

The attack has been discovered by security researchers at Zimperium, with it confirmed that DroidLock is currently affecting users in parts of Europe.

It's thought that the bug is being spread through malicious websites that advertise fake apps, which are made to look like legitimate software. Once installed, the malware can take full control of the device, monitor screen-unlock codes or patterns, and then change them-locking users out of their own phones.

Victims have reported seeing a ransom screen overlay with a countdown timer demanding payment to prevent file deletion.

According to Zimperium's ZLabs team, DroidLock operates as ransomware, using phishing sites to spread. It can lock screens, steal app-lock credentials, and hijack devices through remote-control tools. The malware also abuses administrator privileges to wipe data, take photos using the front camera, silence notifications, and more.

While DroidLock hasn't yet appeared in the UK, Android users everywhere should remain cautious.

If you are concerned by this threat, there are some simple rules to follow to stay safe.

A good start is to only download apps from trusted sources like the Google Play Store, and avoid installing software or sideloading applications from unknown websites. If something seems suspicious, do not install it.

Essentially, you should remain vigilant and think twice before installing any new app on your device.

The DroidLock alert comes just days after another new threat called Albriox was also discovered. This bug has begun infecting some devices in parts of Europe, and those unlucky enough to install it could find that full control of their devices will be handed over to cyber crooks. Once infected, this then allows hackers to commit on-device fraud and even steal money from banking apps.

Albroix also offers other worrying capabilities, such as so-called overlay attacks, which show fake login windows. Thieves can then harvest personal data, plus view login credentials and passwords.