ALL POSTS

Key Findings Zimperium's zLabs identified a new Android banking trojan named Rokarolla that targets 217 cryptocurrency and banking applications The malware combines financial fraud with comprehensive device surveillance, featuring 137 remote commands for near-total phone control Attack begins through malicious websites distributing fake versions of popular apps like TikTok and Chrome Once installed, Rokarolla uses fake login overlays to steal credentials and manipulate transa

Key Findings New TrickMo variant observed January-February 2026 targeting banking and cryptocurrency users in France, Italy, and Austria Malware now routes command-and-control traffic through The Open Network (TON) blockchain instead of conventional internet infrastructure Runtime-loaded APK module includes new network reconnaissance, SSH tunneling, and SOCKS5 proxy capabilities that turn infected devices into network pivots Embedded TON proxy on infected phones makes malicio