Rokarolla Android banking trojan targets bank and crypto apps.
SecurityWeek reported on Rokarolla, a new Android banking trojan capable of targeting more than 200 banking and cryptocurrency applications. The malware is distributed through malicious websites and disguised as popular apps such as Chrome and TikTok. Once installed, it impersonates Google Play Protect, requests broad permissions, and can collect lock-screen credentials. Zimperium said the trojan can steal data from 217 banking and crypto apps, use overlays to phish credentials, exfiltrate SMS messages, hijack calls, and abuse Accessibility Services. It also includes keylogging, screenshot capture, clipboard manipulation, and detection-evasion features.