Security experts are warning Android phone users about a new threat from hackers trying to deceive consumers into downloading popular apps containing the dangerous Rokarolla malware. This malicious software can spy on devices, steal sensitive information like banking details, and even create fake lock screens to capture PINs and passwords.
The recent campaign, identified by the Zimperium team, exploits Android’s capability to sideload apps onto devices, a feature distinct to Android’s more open system compared to Apple’s iOS. Users searching for apps like TikTok or Chrome may be led to deceptive websites showcasing what appears to be legitimate software. If users are tricked, they unknowingly download a fake version of the app bundled with Rokarolla.
Once installed, these apps request numerous personal permissions, making it easy for users to grant access. This mistake allows cybercriminals to access and steal data from the compromised device. Zimperium noted that Rokarolla targets a wide range of financial, cryptocurrency, and social media apps, employing advanced tactics to evade traditional mobile security measures.
To safeguard against such threats, users are advised to only download apps from the official Google Play Store. While sideloading apps may seem convenient, it poses inherent risks. Enabling Google Play Protect is also recommended, as Google asserts that devices are shielded from this malware when this service is active.