Infosecurity
Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts
Part of the Rokarolla story · since 16 Jun
- Tue 16 Jun, 13:19 UTC. Infosecurity, first report. Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts. This article, 1st of 7.
- Tue 16 Jun, 14:27 UTC. The Hacker News, its first report on the story. Android Malware Rokarolla Steals PINs, SMS Codes and Crypto Funds.
- Tue 16 Jun, 18:25 UTC. Dark Reading, its first report on the story. Rokarolla Android Trojan steals data, spies via fake apps.
- Wed 17 Jun, 11:50 UTC. Security Affairs, its first report on the story. Rokarolla Android Trojan hits banks via fake TikTok, Chrome apps.
- Wed 17 Jun, 16:10 UTC. Malwarebytes, its first report on the story. Rokarolla malware steals bank, crypto logins via fake overlays.
- Thu 18 Jun, 11:07 UTC. SecurityWeek, its first report on the story. Rokarolla Android Trojan Hits 200 Banking Apps, Evades Lock.
- Thu 25 Jun, 07:10 UTC. SecurityOnline, its first report on the story. Rokarolla Android Trojan Takes Devices, Steals Crypto & Bank Data.
The article details the Rokarolla trojan, an advanced Android banking malware that not only drains bank accounts but also takes complete control of infected devices. Identified by Zimperium's zLabs, it targets 217 banking and cryptocurrency applications with 137 commands. The trojan spreads through deceptive sites resembling TikTok or Google Chrome, using a Google Play Protect impersonation to install its payload.
It isolates victims from their banks by blocking calls and stealing sensitive information via fake login pages and clipboard manipulation. Additionally, Rokarolla surveils users through timestamped screenshots and attempts to disable protective measures like Google Play Protect. Security experts warn that mobile threats are on the rise, with a significant increase in Android malware incidents.
How the story developed
7 articles from 7 outlets since 16 Jun. Quiet since 25 Jun. This was the first report.
- Tue 16 Jun, 13:19 UTC. Infosecurity, first report. Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts. This article, 1st of 7.
- Tue 16 Jun, 14:27 UTC. The Hacker News, its first report on the story. Android Malware Rokarolla Steals PINs, SMS Codes and Crypto Funds.
- Tue 16 Jun, 18:25 UTC. Dark Reading, its first report on the story. Rokarolla Android Trojan steals data, spies via fake apps.
- Wed 17 Jun, 11:50 UTC. Security Affairs, its first report on the story. Rokarolla Android Trojan hits banks via fake TikTok, Chrome apps.
- Wed 17 Jun, 16:10 UTC. Malwarebytes, its first report on the story. Rokarolla malware steals bank, crypto logins via fake overlays.
- Thu 18 Jun, 11:07 UTC. SecurityWeek, its first report on the story. Rokarolla Android Trojan Hits 200 Banking Apps, Evades Lock.
- Thu 25 Jun, 07:10 UTC. SecurityOnline, its first report on the story. Rokarolla Android Trojan Takes Devices, Steals Crypto & Bank Data.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 7 articles as a listHide the list
- Tue 16 JunDay 03
- Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts13:19 · Infosecurity · First report · This article, 1st of 7
- Android Malware Rokarolla Steals PINs, SMS Codes and Crypto Funds14:27 · The Hacker News
- Rokarolla Android Trojan steals data, spies via fake apps18:25 · Dark Reading
- Wed 17 JunDay 12
- Rokarolla Android Trojan hits banks via fake TikTok, Chrome apps11:50 · Security Affairs
- Rokarolla malware steals bank, crypto logins via fake overlays16:10 · Malwarebytes
- Thu 18 JunDay 21
- Rokarolla Android Trojan Hits 200 Banking Apps, Evades Lock11:07 · SecurityWeek
Quiet for 7 days
Thu 25 JunDay 91- Rokarolla Android Trojan Takes Devices, Steals Crypto & Bank Data07:10 · SecurityOnline · Picked up again