# RatHat Android Malware Targets Screen Touches

> New Android malware records screen touches to steal passwords.
- Title: RatHat Android Malware Targets Screen Touches · Mashable
- Summary: New Android malware records screen touches to steal passwords. RatHat malware uses AI to capture screen touches and steal passwords from infected devices.
- Keywords: rathat, android, malware, screen touches, passwords, zimperium, generative ai, accessibility permissions, wireless debugging, developer options, technology, culture
- Source: Mashable — https://mashable.com/tech/rathat-android-malware-records-screen-touches
- Author: Matt Binder
- Published: 2026-09-21T22:58:51+00:00
- Read time: 1 min
- Topics: rathat, android, malware, screen touches, passwords, zimperium, generative ai, accessibility permissions, wireless debugging, developer options, technology, culture
## New Malware Discovered
Cybersecurity researchers at Zimperium discovered a new strain of Android malware called RatHat linked to threat actors based out of China.
## AI-Powered Malware Control
RatHat uses generative AI for operational control and incorporates novel techniques for persistence.
## How It Infects Devices
RatHat infects devices through social engineering by tricking users into downloading fake apps like Google Chrome.
## Access Permissions Requested
Once granted, RatHat requests accessibility permissions while masked as a legitimate application.
## Stealing Screen Interactions
RatHat activates Wireless Debugging under Developer Options to capture text messages and steal passwords.
## What Happens Next
RatHat uses screen touches to steal passwords and multi-factor authentication codes from infected devices.
## Key takeaway

RatHat malware uses AI to capture screen touches and steal passwords from infected devices.