This versatile mobile banking Trojan morphs into ransomware on detecting a removal attempt.