NewsDark Reading
Rokarolla Android Trojan Levels Up to Full Device Control, Persistence
Teaser from the source
The emerging malware, spread via fake TikTok and Chrome downloads, has evolved by combining banking fraud with extensive device surveillance and remote control.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Persistence
Other advisories
- MediumCVE-2026-107146The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session …
- Not ratedosv:CVE-2026-110843n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint
- Not ratedosv:CVE-2026-97343Burst Statistics <= 3.7.1 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token'
- Highghsa:GHSA-5fqc-mrg8-w798Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence
- HighCVE-2026-114097Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence
- Not ratedosv:CVE-2026-100711froxlor before 2.3.12 Authentication Bypass via Session Persistence
- Not ratedosv:CVE-2026-55563Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize`
- Not ratedosv:CVE-2026-93763Silent plaintext persistence via unresolved callable database name in encryption schema map
Other news entries
- Inside AvisLoader: A Windows Malware Loader Built to Resist DisruptionNewsBleepingComputer
- Linux Backdoor Abuses STUN Protocol, Exploits Dozens of FlawsNewsSecurityWeek
- WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared MemoryNewsThe Hacker News
- Daemon Tools Hackers’ NeedyMantis Malware Dissected by MicrosoftNewsSecurityWeek
- New x47.c Windows Botnet Weaponizes xAI Grok, AI API DrainingNewsSecurityWeek
- PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer PersistenceNewsThe Hacker News
- Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackersNewsCSO Online
- Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's CloudNewsDark Reading
Source: https://www.darkreading.com/endpoint-security/rokarolla-android-trojan
ID