Researchers at ESET have spotted what they believe to be the first file-encrypting,TOR-enabled ransomware targeting Google Android phones.