AnalysisCybersecuritySeptember 21, 2026

RatHat Android trojan uses generative AI to control infected devices

Read original source →securityweek.com

Zimperium found RatHat, an Android trojan distributed via smishing and malvertising that uses generative AI to navigate device interfaces in real time and monitors input at the hardware level to reconstruct PINs, passwords, and patterns. It abuses Accessibility Services and autonomous local ADB self-pairing to escape the app sandbox and run shell-level daemons.

How this story unfolded

10 days · 3 reports · from Sep 18

  1. Sep 18
  2. Sep 21
  3. Sep 28

More stories today

Open the live feed