New Rokarolla Android Trojan Found Targeting 217 Crypto and Banking Apps
New Rokarolla Android Trojan targets 217 crypto and banking apps with clipboard hijacking and device control.
A new Android banking trojan named Rokarolla has been discovered by Zimperium researchers. This malware is capable of hijacking clipboards, blocking bank calls, and taking complete control of infected devices. It targets 217 cryptocurrency and banking applications by using fake screen overlays and requesting Accessibility Services permissions.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Zimperium?
Get an email when a new story names Zimperium, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Rokarolla Android trojan exploits users' willingness to grant broad Accessibility Services permissions, enabling full device takeover across 217 financial and crypto applications. By using fake screen overlays (overlay attacks), it silently captures credentials and intercepts clipboard data — including cryptocurrency wallet addresses — without the user's knowledge. This matters because mobile banking trojans that abuse legitimate OS features are extremely difficult to detect with standard antivirus tools. The root issue lies in a lack of user awareness about the risks of granting elevated permissions to unverified apps, combined with insufficient mobile device security controls.
What helps against this
How we list vendors- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — infocontablidades.it.com