New RatHat Android malware uses AI to automate device control
-
A newly discovered Android malware family called RatHat is drawing attention for its use of an AI-powered subsystem that helps operators remotely navigate compromised devices. According to reporting from BleepingComputer, the malware is designed to give attackers remote control over an infected Android device, with the AI component intended to streamline and automate parts of that control process.
The remote-control functionality means an operator can interact with the device after it has been compromised, rather than relying solely on pre-scripted actions. The AI subsystem appears intended to make navigating the device easier for the person behind the attack.
No specific CVE identifiers, KB numbers, or advisory IDs have been disclosed in the source material, and no detailed technical breakdown of the malware's components, distribution method, or affected Android versions has been provided at this time. As with any newly reported Android threat, users should be cautious about installing applications from untrusted sources and should keep devices updated through official channels.
Source: BleepingComputer
Given that RatHat is described as giving operators remote control of infected devices, how is your organization approaching mobile threat detection and app-sideloading policies?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login