conv.

← The whole story
Security
RatHat: AI-powered Android malware steals bank credentials, resists deletion

CNET publishes technical breakdown of RatHat's infection chain and capabilities

1 Sep 20 9:20 AM · 3d ago · 4 articles · 2 posts · 3 sources · development 1 of 1

CNET details how RatHat requests accessibility permissions, uses them to unlock Wireless Debugging and ADB Shell, then installs an AI-assisted agent to steal data. The malware targets financial apps and has been found in 162 infected apps reporting to a dozen attacker-controlled servers.

CNET publishes technical breakdown of RatHat's infection chain and capabilities
CNET

“Escalation in the Android landscape often relies on granting apps additional permissions that the OS locks away by default to keep the devices secure.”

Sav Wheeler, Malwarebytes research engineer

Zimperium Mobile security firmSav Wheeler Research engineer, Malwarebytes

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 5 pieces in two hours at Sep 20, 8 AM; 15 pieces over 6 days (9 articles · 6 posts) Sep 17, 4 PM — 2 pieces · 2 posts — Mastodon 2Sep 17, 6 PM — quietSep 17, 8 PM — quietSep 17, 10 PM — quietSep 18, 12 AM — quietSep 18, 2 AM — quietSep 18, 4 AM — quietSep 18, 6 AM — quietSep 18, 8 AM — quietSep 18, 10 AM — quietSep 18, 12 PM — quietSep 18, 2 PM — quietSep 18, 4 PM — quietSep 18, 6 PM — quietSep 18, 8 PM — quietSep 18, 10 PM — quietSep 19, 12 AM — quietSep 19, 2 AM — quietSep 19, 4 AM — quietSep 19, 6 AM — quietSep 19, 8 AM — quietSep 19, 10 AM — quietSep 19, 12 PM — quietSep 19, 2 PM — quietSep 19, 4 PM — quietSep 19, 6 PM — quietSep 19, 8 PM — quietSep 19, 10 PM — quietSep 20, 12 AM — quietSep 20, 2 AM — quietSep 20, 4 AM — quietSep 20, 6 AM — quietSep 20, 8 AM — 5 pieces · 5 articles — Google News 4, Newswires 1Sep 20, 10 AM — quietSep 20, 12 PM — quietSep 20, 2 PM — quietSep 20, 4 PM — quietSep 20, 6 PM — quietSep 20, 8 PM — 1 piece · 1 post — Mastodon 1Sep 20, 10 PM — quietSep 21, 12 AM — quietSep 21, 2 AM — quietSep 21, 4 AM — quietSep 21, 6 AM — 1 piece · 1 article — Newswires 1Sep 21, 8 AM — 1 piece · 1 post — Mastodon 1Sep 21, 10 AM — quietSep 21, 12 PM — quietSep 21, 2 PM — quietSep 21, 4 PM — 1 piece · 1 post — Mastodon 1Sep 21, 6 PM — 3 pieces · 3 articles — Google News 2, Newswires 1Sep 21, 8 PM — quietSep 21, 10 PM — quietSep 22, 12 AM — quietSep 22, 2 AM — quietSep 22, 4 AM — quietSep 22, 6 AM — quietSep 22, 8 AM — quietSep 22, 10 AM — quietSep 22, 12 PM — quietSep 22, 2 PM — quietSep 22, 4 PM — quietSep 22, 6 PM — quietSep 22, 8 PM — quietSep 22, 10 PM — quietYesterday, 12 AM — quietYesterday, 2 AM — quietYesterday, 4 AM — quietYesterday, 6 AM — quietYesterday, 8 AM — quietYesterday, 10 AM — quietYesterday, 12 PM — quietYesterday, 2 PM — quietYesterday, 4 PM — quietYesterday, 6 PM — 1 piece · 1 post — Hacker News 1Yesterday, 8 PM — quietYesterday, 10 PM — quietToday, 12 AM — quiet 1
1CNET publishes technical breakdown of…
Sep 18Sep 19Sep 20Sep 21Sep 22yesterdaynow · 2:58 AM ET

Reported in the same hours no headline names this development itself — these 4 claims were published in its stretch

  1. 4 outlets New RatHat Android malware uses AI to automate device control

    first by BleepingComputer, 3d ago · also Inshorts, Malwarebytes, TechRadar

    3 more headlines
  2. 1 outlet RatHat is a new Android malware that records your screen touches to steal passwords

    first by Mashable, 2d ago

  3. 1 outlet RatHat Android Trojan Uses AI for Automation

    first by SecurityWeek, 2d ago

  4. 1 outlet Say Hello to RatHat, a New AI-Powered Malware Invading the Android Ecosystem

    first by CNET, 3d ago

What people said 2 voices · verbatim

All 1 developments of RatHat: AI-powered Android malware steals bank credentials… →

MastodonNewswiresGoogle NewsHacker News