RatHat Malware Uses AI to Keep Shell Access After Uninstall

Cybersecurity researchers have identified RatHat, a new Android malware operated by China-based threat actors. It uses AI-powered navigation and abuses Android Debug Bridge (ADB) to maintain shell-level access on a device even after the user uninstalls the main application.