Researchers have uncovered an Android banking Trojan that targets more than 200 banking and cryptocurrency apps and can take over infected devices.

Rokarolla targets 217 banking and crypto apps with 137 commands, enabling PIN, SMS code, and crypto payment theft.

Zimperium's zLabs found Rokarolla, an Android banking trojan with 137 commands that steals PINs, intercepts SMS, hijacks crypto payments, and kills Play Protect.