Android malware can steal your PIN and bank logins

RatHat Android malware uses AI to steal banking credentials, intercept two-factor authentication codes and reconstruct your PIN from touch inputs.

RatHat is a new Android malware that records your screen touches to steal passwords

This malicious software also weaponizes AI to infect the device.
Cybernews

This Android malware is nuts: it connects to your phone like a developer, but from the inside

Developers can connect an Android phone to a computer via USB or WiFi to gain powerful debugging access. Now, one nasty piece of malware has figured out how to establish the same access from inside ...
The420.in

New RATHat Android Malware Uses Artificial Intelligence to Target Banking Apps

RATHat Android malware uses accessibility privileges and AI to automate device control and compromise banking data, security ...
Morning Overview on MSN

New Android malware uses an AI layer to drive your phone and lift banking PINs

Zimperium zLabs has identified a new Android malware family called RatHat that pairs a remote-access trojan with an ...
The Hacker News

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to ...

A real ChatGPT page is being used to trick people into installing malware

Attackers are using ChatGPT, Google Sites, and a fake Cloudflare check to make a malware campaign look far more convincing.
CNET on MSN

Say Hello to RatHat, a New AI-Powered Malware Invading the Android Ecosystem

The malware pretends to be a legitimate download for an app like Google Chrome.
Cyber Security News

RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions

RATHat Android malware abuses Gemini AI and Accessibility features to control infected phones and steal banking data.
The Daily Hodl

New Android Malware Lets Scammers Drain Bank Accounts and ATMs – Without Stealing Your Bank Card

Scammers are draining bank accounts and pulling cash from ATMs without needing the victim’s debit card in hand. Experts at the cybersecurity firm Group-IB say they have uncovered a previously unseen ...

Arsink: Android Remote Access Malware Disguised as Modded Apps

This article is a Japanese translation of the article from the official Zimperium blog.Original publication date: January 29, ...