Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Zimperium researchers exposed RatHat, an Android malware that gains shell access via Wireless Debugging and uses AI to navigate devices dynamically.
Summary
It steals banking credentials, intercepts OTPs, captures PINs from raw touch data and reinstalls itself after removal. The campaign has already hit 162 apps. Users must avoid sideloading and scrutinize accessibility requests.
This is a brief wire summary — the full story (linked below) has the complete details.
KazaSec's take
AI-related security incidents are a genuinely new category — prompt injection, model manipulation, and data leakage through an LLM integration don't map cleanly onto traditional application security testing, and are worth assessing deliberately rather than assuming existing controls already cover them.
Coverage details
We've archived 40 other articles touching the same topic (ai-powered malware, wireless debugging, rathat malware) — see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.