New Chinese-Made 'RatHat' Android Malware Leverages AI to Steal Financial Data

Zimperium researchers discovered a new Android malware called RatHat, linked to Chinese hackers. It spreads via phishing sites, smishing, and third-party forums, bypasses Android protections, and uses generative AI to control clicks and on-screen navigation.

• RatHat steals banking data, 2FA codes, and screen content
• Malware bypasses Android restrictions via SessionInstaller API
• Generative AI assistant used to control clicks
• Malware includes four anti-analysis layers and one anti-debug