Rokarolla Android Malware Targets 217 Banking and Crypto Apps, Steals PINs and Credentials

Summary

Rokarolla is a new Android malware that targets 217 banking and cryptocurrency apps with 137 remote commands. It steals lock-screen PINs, reads and sends SMS messages, rewrites clipboard data to redirect crypto payments, and disables Google Play Protect. The malware spreads through malicious websites posing as popular apps like TikTok and Chrome, using a dropper disguised as Google Play Protect to install the payload and request Accessibility access. It uses overlay attacks to display fake HTML login pages to capture credentials and card details, and can also overlay the lock screen to capture PINs.

Source

bskyRokarolla Android Malware Targets 217 Banking and Crypto Apps, Steals PINs and Credentialsbriefly.co