NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

New RatHat Android malware uses AI to automate device control

BACKGROUND
1 SIGNALFIRST DETECTED 17 September 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
17 Sept
Other feeds and industry voices
18 Sept
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat actors and features an artificial intelligence

REPORT · WHERE · The Hacker NewsOPEN STORY
18 Sept
New Android malware uses AI to steal bank logins and PINs

RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
18 Sept
RatHat: AI-Powered Mobile Threat Steals Android Shell

<h2> 1. Basic Information </h2> <ul> <li>Original Title: RatHat: AI-Powered Mobile Threat is Here for Your Credentials &amp; Bank Accounts</li> <li>Source: Zimperium zLabs</li>

REPORT · WHAT · Dev.toOPEN STORY
28 Sept
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has&nbsp;traced nearly

REPORT · WHO · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →