Android users are being urged to watch out for a new bug that can lock screens and delete files unless a ransom is paid.