Article Image

New 'El Gato' Android ransomware may sound cute, but it packs a punch

McAfee cybersecurity researchers have discovered a new Android ransomware, dubbed 'El Gato,' which is capable of stealing SMS messages, locking infected devices remotely, and permanently encrypting files.

A killer software cat may be coming for your text messages, according to a threat report by McAfee Labs Mobile Malware Research team. It’s been dubbed “El Gato” — “The Cat,” in Spanish — because the Android malware’s code contains, of all things, an image of a yowling tabby.

McAfee discovered an instance of El Gato running on a compromised server, but noted that it appeared inert — it wasn’t password protected, and “included code words such as MyDifficultPassw.” 

Unlike the pictured kitty, El Gato is anything but cute and cuddly. The malicious software is a form of ransomware, code that renders a device unusable until the victim forks over money. This one is particularly sophisticated, from the sound of it — El Gato can encrypt files, steal text messages, and even “block access” to the affected handset or tablet entirely.

El Gato accomplishes most of its nasty shenanigans remotely, via a connection with an offshore server. It constantly monitors an infected device’s internet connection for commands and, once it receives them, executes on them. Among the most common functions McAfee’s researchers discovered were sending messages from the infected device, forwarding and deleting text messages, locking the device’s screen, and crashing a specific application. Worryingly, it’s capable of performing many of those tasks clandestinely, in the background, making them effectively invisible to victims.

Most of El Gato’s commands are dispatched through a surprisingly polished web-based interface, said McAfee. They can be executed in sequence or individually — stealing a text message, frighteningly, is as easy as clicking a button in a web browser.

Perhaps worse yet, El Gato is capable of encrypting all files on the device’s internal storage — rendering it essentially unusable without the randomly generated password it generates. It contains a means of reversing the damage — the malware has can decrypt any file it secures — but presumably only after an affected user hands over whatever form of payment the attacker demands.

There’s good news, though: as far as malware goes, El Gato is relatively harmless. It hasn’t been observed in the wild yet, and its traffic is entirely unencrypted, making it susceptible to countermeasures. In other words, El Gato’s commands could be intercepted, isolated, and rendered harmless.

El Gato may be the latest instance of ransomware to emerge on Android, but it’s hardly the first. In May, cybersecurity analysts at Malwarebytes Labs discovered Cyber.Police, a malicious app that displayed a countdown timer, threatening message, and an explicit pornographic image to victims. It demanded that users purchase iTunes gift cards in exchange for an unlock code — a component which El Gato thankfully lacks, as of yet.

Are you tired of paying for streaming services you never watch just to get a phone plan feature you actually want? T-Mobile has good news for you! The carrier is rolling out new plans, called T-Mix, in early November to replace its old Experience lineup with a build-your-own perks system called Picks.

The benefits you choose vary from streaming and gaming to food delivery, AI, satellite service, and phone discounts. But if you are satisfied with your existing plan, you can keep it.

Merely days after the iPhone Duo hit the shelves, images of broken screens on the phone started popping up across social media. Until now, it’s been unclear what’s causing the line of defective pixels that appears vertically along the crease, as well as horizontally, on the phone’s inner display.

Apple has finally acknowledged the issue, which has shown up on iPhone Duo units owned by customers as well as demo units in stores. In a statement shared with Bloomberg, Apple says that not all iPhone Duo units are affected and that those that are tend to show the display fault early on. The company added that users who experience problems with their iPhone Duo display should contact AppleCare for a replacement.

Not long ago, Apple treated independent repair like an act of outright hostility. The Cupertino giant locked down parts with serial-number pairing, while repair tools remained firmly out of reach of anyone outside its authorized repair network. More importantly, the company waged a legal and lobbying battle against right-to-repair legislation.

I've covered enough of these fights over the years to know what a shift looks like. That's why what happened in October 2026 genuinely caught me off guard. The day the iPhone Duo went on sale, what may be the most mechanically complex iPhone to date, Apple pulled off a surprising about-face. It published teardown-style repair manuals for a handful of major components.