RatHat: AI-Powered Mobile Threat Steals Android Shell

<h2> 1. Basic Information </h2> <ul> <li>Original Title: Indonesia Hit by Android Banking App Cloning Campaign</li> <li>Source: Dark Reading, Group-IB</li> <li>Publication Date:

Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat actors and features an artificial intelligence

<h2> 1. Basic Information </h2> <ul> <li> <strong>Article Title</strong>: Manic: A blend between banking malware and spyware</li> <li> <strong>Publisher</strong>:

RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.

A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices. [...]

<p>Most coverage of Kaspersky's June 2026 DoFun disclosure buried the lede: nothing was hacked. The malware arrived through TWCore (<code>com.tw.core</code>), the legitimate

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has&nbsp;traced nearly