RatHat Trojan Uses Gemini to Steal Bank Logins — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- RatHat Android banking trojan uses Gemini AI and ADB Shell commands to take control of infected devices and steal users' PINs and bank logins.
- Group-IB uncovered the malware, whose console — dubbed RemControl — leverages Gemini to identify higher-value victims.
Why it matters: Android banking malware that weaponizes a mainstream AI model moves attacks beyond static phishing or keylogging into automated, AI-driven targeting of higher-value accounts. For banks and the millions of Android users with mobile banking apps, this raises the bar for fraud detection and device-side security.
Ask SkimNews
