crypto apps Archives

AppWizard

July 16, 2026

Google Play Must Carry Rival App Stores Jul. 22

Google will introduce rival Android app stores within its Play Store starting July 22, following a court ruling that mandates the inclusion of competing app stores. This change allows cryptocurrency applications greater visibility while still processing downloads through Google Play, which will maintain its service fee. Competing app stores must be U.S.-based, keep malware rates below 1%, and pay an annual fee of ,000. The order is temporary, lasting until November 1, 2027, and prohibits Google from incentivizing device manufacturers to prioritize its own store.

AppWizard

June 17, 2026

Hundreds of Android banking and crypto apps hit by dangerous new Rokarolla malware

Security researchers at Zimperium have identified a new Android banking trojan named “Rokarolla,” which threatens users of over 200 banking and cryptocurrency applications. It is distributed through spoofed websites, third-party app stores, and social media, but has not been found on the Google Play Store or other official Android repositories. Rokarolla requests extensive permissions, particularly concerning Accessibility services, SMS, calls, and notifications. Its capabilities include accessing WhatsApp contacts, capturing keystrokes, recording the screen, blocking incoming calls, and sending screenshots. Zimperium has not specified which geographical areas may be most vulnerable or the estimated number of potential infections. Users are advised to download applications only from official repositories to reduce the risk of encountering this malware.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.

AppWizard

November 3, 2025

The Best Crypto Apps for Android: A 2025 Guide to Trading and Managing Your Portfolio

There are over 3 billion Android devices in use, making it a significant platform for cryptocurrency applications. The Google Play Store features numerous trading, wallet, and portfolio apps due to evolving regulations and a focus on user experience. Key elements for navigating crypto apps include usability, security, compliance, and responsibility. Popular trading apps include Binance, Coinbase, and Bybit, which offer features like biometric login and real-time notifications. Security measures such as two-factor authentication and Know Your Customer verification are essential for safe trading. Users can choose between hot wallets and cold wallets, with options like Trust Wallet, MetaMask, and SafePal available. Staking apps like Binance Earn and Crypto.com encourage user engagement by offering rewards for locking tokens. Ethereum underpins many Android crypto apps, facilitating interactions with ERC-20 tokens and enhancing transaction efficiency. A checklist for safe app downloads includes security checks, reputation checks, functionality checks, and transfer checks. As the crypto landscape evolves, apps are expected to integrate more with fiat finance and Web3 technologies, emphasizing the importance of verification and security for users.