From the We Live Security blog:

After clicking on the button, the user’s device is doomed: the Trojan app has obtained Administrator rights silently and now can lock device — and even worse, it set a new PIN for the lock screen.

Bottom line, Android friends - don’t get your software from sketchy sources. It will bite you in the ass, and then lock your pants.