Security experts are warning Android users about a new threat called the Rokarolla bug, which has resurfaced in popular apps. This malicious software can infiltrate devices, allowing hackers to spy on users and steal sensitive information like banking details. Moreover, it can create a fake lock screen to capture passwords and PIN numbers.
The method through which people are falling victim to Rokarolla involves sideloading apps onto Android devices. Cybercriminals redirect users searching for apps like TikTok or Chrome to fake websites that appear legitimate. Users unknowingly download a counterfeit version of the desired app, which secretly installs Rokarolla in the background.
Once installed, these fake apps request numerous permissions, making it easy for users to unwittingly grant access. This paves the way for cybercriminals to exploit the stolen data from over 200 financial, cryptocurrency, and social media applications.
To protect against this threat, experts advise users to only download apps from the official Google Play Store and ensure that Google Play Protect is activated. While sideloading apps may seem convenient, it poses significant risks. By taking these precautions, users can safeguard their devices against the dangers posed by Rokarolla.