Rokarolla uses fake overlay windows, SMS interception, and clipboard manipulation to steal banking credentials and cryptocurrency addresses; no technical patch exists.