MysteryBot is a mixtape of ransomware, keyloggers and banking trojans to create a new virus.

Insecurity experts ThreatFabric discovered the malware, and said it appears to be related to the well-known LokiBot Android banking trojan.There apparently is a link between the creator(s) of LokiBot and MysteryBot. MysteryBot is clearly based on the LokiBot bot code.

MysteryBot can take control of infected devices, with the ability to read messages, gather contact information and steal sensitive e-mails.

While Android malware tends to attack older versions of the Google mobile OS, MysteryBot can target recent pieces of software like Android 7 and Oreo.

It uses an overlay screen to display fake login pages on top of legitimate apps for the Google mobile OS, so cybercriminals can steal sensitive user credentials. MysteryBot has a rather natty keylogger feature.