Chastitylock Ransomware locks Cellmate Chastity Device that is controlled via Qiui Bluetooth App. Attacker was able to exploit an Direct Object Reference Vulnerability in the API that can enable remote locking, location disclosure and expose private information. The attacker ask 0.02 BTC to release lock.