SecurityThe Hacker Newsabout 2 hours ago
RatHat Android Trojan Uses Gemini to Rank Victims
6 min read
Cleafy traced nearly 100 deployments of RatHat's web console since April 2026. The Android banking trojan now asks Google's Gemini to estimate victims' bank balances from stolen texts and passwords, sorting phones into high-value and mid-value groups. A Go program streams screens without permission prompts, surviving app deletion until reboot.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
