Anyone with an Android phone must delete these popular apps now

If you happen to own a phone powered by Android, you must pay attention to a new warning from cybersecurity experts. Researchers at Zimperium have uncovered a worrying new campaign in which hackers are tricking users into installing popular apps that have been infected with a dangerous piece of malware known as Rokarolla.

Once installed, Rokarolla has some very nasty side effects, including the ability to monitor device activity and steal sensitive information, such as banking credentials. It can even display a fake lock screen over the genuine one, allowing attackers to capture PINs, passwords, and security patterns.

According to experts, the latest attacks take advantage of Android's ability to sideload apps — installing software from outside the official app store. While sideloading offers greater flexibility than Apple's iOS, it also carries significant security risks.

Users searching online for popular apps such as TikTok or Chrome may be redirected to fraudulent websites that appear legitimate. These sites offer counterfeit versions of well-known apps, which secretly install Rokarolla in the background.

To help gain access and give hackers the best chance of gathering data, the malicious apps typically request extensive permissions, including access to notifications and other sensitive device functions. Because the apps closely resemble legitimate software, many users grant these permissions without hesitation.

Once access is granted, attackers can begin collecting personal data and compromising accounts.

"Rokarolla targets an expansive ecosystem of over 200 financial, cryptocurrency, and social media applications," Zimperium said. "By employing sophisticated evasion tactics, these threats are specifically engineered to circumvent legacy, signature-based mobile security solutions."

To reduce the risk of infection, users should only download apps from the official Google Play Store and avoid sideloading software from unknown sources. Security experts also recommend enabling Google Play Protect, which Google says can help detect and block threats such as Rokarolla.