Delete this app from your phone immediately! It has been downloaded millions of times.

Delete this app from your phone immediately! It has been downloaded millions of times.

24.07.2026 14:50

A new banking malware called Rokarolla targeting Android phone users has been found to spread through fake versions of popular apps like Chrome and TikTok. Experts warned users to only download from official app stores and remove suspicious apps from their devices, as the malware can target 217 banking and cryptocurrency applications.

A new malware targeting Android devices has alarmed cybersecurity experts. The banking malware named "Rokarolla" has been found to spread through fake versions of commonly used applications like Chrome and TikTok.

TARGETS 217 BANKING AND CRYPTOCURRENCY APPS

According to research, Rokarolla can target 217 banking and cryptocurrency applications worldwide. The malware has features capable of capturing users' bank login credentials, screen lock passwords, and one-time verification codes sent via SMS.

Experts warn that the stolen information could be used for unauthorized access to bank accounts and digital wallets.

BEWARE OF FAKE CHROME AND TIKTOK APPS

The most striking feature of Rokarolla is that it appears to users as fake versions of popular applications like Chrome and TikTok. These imitations of genuine apps are distributed through websites outside official stores or third-party app markets.

Experts recommend using only official app stores like Google Play and avoiding downloading APK files from untrusted websites.

REMOVE IMMEDIATELY IF FOUND ON YOUR PHONE

Cybersecurity experts advise users who have Chrome, TikTok, or similar apps installed from unofficial sources on their phones to remove them immediately. It is also emphasized that the Google Play Protect feature should be kept active and the operating system should be kept up to date.

Symptoms such as sudden slowdown of the phone, increased battery consumption, unexpected permission requests, or unexplained data usage are noted as possible signs of malware.

In order to provide you with a better service, we position cookies on our site. Your personal data is collected and processed within the scope of KVKK and GDPR. For detailed information, you can review our Data Policy / Disclosure Text. By using our site, you agree to our use of cookies.', '