New RatHat Android Malware Uses AI to Automate Device Control

New Android Malware Uses AI to Steal Banking Logins and Control Phones: Report

A newly uncovered Android malware strain is using artificial intelligence to take over infected phones and steal banking credentials. Zimperium’s zLabs team says the malware, called RatHat, appears linked to threat actors that appear to be operating in China and spreads through smishing and malvertising that push malicious APK downloads outside Google Play. Once installed, RatHat abuses Accessibility permissions to turn on Developer Options and …

New RatHat Android malware uses AI to automate device control

A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices. [...]

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Ravie LakshmananSep 18, 2026Mobile Security / Malware Cybersecurity researchers have flagged a new Android malware called RatHat that’s assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-powered system to navigate and control compromised devices. “Distributed primarily via targeted smishing (SMS/text phishing) and malvertising campaigns leading to deceptive third-party download portals, RatHat us…

China-Linked RatHat Android Malware Uses AI To Steal Data

Cybersecurity researchers have flagged a new Android malware called RatHat, assessed to be operated by China-based threat actors, that features an artificial