Ai-powered Android Malware Can Self-recover and Control Devices

WHO:

BleepingComputer - The malware is called RatHat and is linked to threat actors from China.

TechRadar - AI serves as the eyes and hands of the malware.

WHAT:

BleepingComputer - RatHat targets users with an AI-powered subsystem for remote navigation of compromised devices.

BleepingComputer - The malware is distributed through malvertising, SMS, and phishing sites promoting APK downloads from outside Google Play.

BleepingComputer - RatHat enables Developer Options and Wireless Debugging to gain local shell-level execution context.

BleepingComputer - The malware installs a Go-based agent (liblocal-service.so) that runs commands with ADB shell privileges and manages persistence.

BleepingComputer - RatHat can intercept SMS messages, record text-change events, and capture lock-screen PINs, passwords, and unlock patterns.

BleepingComputer - The malware displays HTML overlays for banking and cryptocurrency applications to capture account credentials.

BleepingComputer - RatHat uses an AI-powered user interface-automation engine to navigate the device interface.

BleepingComputer - The malware actively thwarts removal attempts by intercepting the uninstall confirmation screen.

HOW:

BleepingComputer - RatHat relies on abusing Android's Accessibility permissions to perform highly privileged actions.

BleepingComputer - The AI subsystem serializes the live Android Accessibility tree into XML and sends it to a popular AI assistant.

BleepingComputer - The AI tool identifies interface elements and returns navigation instructions such as 'SCROLL_DOWN'.

BleepingComputer - The malware employs multiple anti-analysis techniques, including APK container tampering and a bloated (61MB) Android manifest file.

(UPDATED September 18, 2026 21:04 UTC)

A new malware called RatHat, linked to threat actors from China, is causing concern as it utilizes AI to navigate compromised devices remotely. This malware is distributed through malvertising, SMS, and phishing sites, and it can intercept SMS messages, capture lock-screen PINs, and even display fake overlays for banking applications to steal credentials. RatHat takes advantage of Android's Accessibility permissions and employs an AI subsystem to send live data to an AI assistant for navigation, while also using various anti-analysis techniques to evade detection.