RatHat Turns Android Accessibility Into an Attack Weapon
Zimperium details RatHat, a China-linked Android trojan abusing Accessibility, wireless debugging, and generative AI to steal banking credentials and persist on phones.
65
Product
Alipay
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 17, 2026
- Last mentionedSep 18, 2026
Timeline
2 articles · newest firstRatHat Abuses Android Wireless Debugging to Gain Shell Access and Steal Banking PINs
New Android banking trojan RatHat abuses Wireless Debugging to gain shell access and steals banking PINs and OTPs via raw touch capture.
72
Appears with
- WeChatproduct · 2
- Zimperiumorganization · 2
- RatHatmalware · 2
- Zimperiumvendor · 1
- China-based operatorsthreat actor · 1
- Generative AI assistant (unnamed)ai model · 1
- Androidvendor · 1
- zLabsorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.