New RatHat Android malware uses AI to automate device control
Zimperium discovered RatHat, an AI-assisted Android banking trojan linked to Chinese actors, stealing credentials via overlays and intercepting SMS one-time passwords.
65
Threat actor
RatHat operators (suspected Chinese)
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 17, 2026
- Last mentionedSep 17, 2026
Timeline
1 articles · newest firstAppears with
- RatHatmalware · 1
- ToxicPandamalware · 1
- Googlevendor · 1
- Google Playproduct · 1
- Zimperiumvendor · 1
- Androidproduct · 1
- Zimperiumorganization · 1
- RedHookmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.