New Android malware uses AI to steal bank logins, remains after deletion

A new Android Trojan called RatHat uses AI to navigate infected phones and steal banking credentials, authentication codes and screen-lock PINs. Operated by China-based threat actors, it abuses a legitimate tool called Android Debug Bridge (ADB). Users are tricked into installing malware-laced APKs and the attacker still retains shell access on the device even if victim manages to uninstall it.