Zimperium's zLabs found Rokarolla, an Android banking trojan with 137 commands that steals PINs, intercepts SMS, hijacks crypto payments, and kills Play Protect.