630
The malware has morphed beyond just locking users ' screens on their Android devices and demanding payment , to taking over administrative rights and controlling the device , including its microphone , speakers , and the camera .
 ( ransom: demanding payment,  Android devices: victim, locking users ' screens: attack pattern, The malware: tool, camera: victim, speakers: victim, microphone: victim, device: victim, taking over administrative rights: attack pattern, controlling: attack pattern) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( ransom: demanding payment,  Android devices: victim, locking users ' screens: attack pattern, The malware: tool, camera: victim, speakers: victim, microphone: victim, device: victim, taking over administrative rights: attack pattern, controlling: attack pattern) 