New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps
June 17, 2026 
Rokarolla Android malware targets 217 banking and crypto apps, steals credentials, blocks bank calls, intercepts SMS, and disables Play Protect.
Zimperium’s zLabs researchers have published a detailed analysis of Rokarolla, a new Android banking trojan named after its command-and-control infrastructure. It spreads through malicious websites masquerading as TikTok and Chrome, one confirmed distribution point being hxxps://infocontablidades[.]it[.]com/. The first thing a victim installs is a dropper that masquerades as Google Play Protect, a choice intended to avoid…
