Rokarolla Banking Trojan Targets 200 Applications

Mobile security firm Zimperium is warning Android users about Rokarolla, a new banking trojan that can target over 200 cryptocurrency and banking applications. The malware is distributed through malicious websites disguised as popular apps like Chrome and TikTok, and once installed, it can steal lockscreen credentials, capture keystrokes, hijack SMS messages and calls, and even replace cryptocurrency addresses with attacker-controlled ones. The trojan evades detection by hiding its app icon, disabling Google Play Protect, and muting all device audio and vibrations to operate silently during fraudulent activities.