From Mashable · Matt Binder · · 1m
RatHat Android Malware Targets Screen Touches
New Android malware records screen touches to steal passwords.
In brief
New Android malware records screen touches to steal passwords. RatHat malware uses AI to capture screen touches and steal passwords from infected devices. Originally reported by Mashable.
New Malware Discovered

Cybersecurity researchers at Zimperium discovered a new strain of Android malware called RatHat linked to threat actors based out of China.
AI-Powered Malware Control

RatHat uses generative AI for operational control and incorporates novel techniques for persistence.
How It Infects Devices
RatHat infects devices through social engineering by tricking users into downloading fake apps like Google Chrome.
Access Permissions Requested
Once granted, RatHat requests accessibility permissions while masked as a legitimate application.
Stealing Screen Interactions

RatHat activates Wireless Debugging under Developer Options to capture text messages and steal passwords.
What Happens Next
RatHat uses screen touches to steal passwords and multi-factor authentication codes from infected devices.
The main idea
RatHat malware uses AI to capture screen touches and steal passwords from infected devices.


