analiza aiqbench
This malware campaign represents a significant shift where attackers leverage Google's Gemini AI model via direct API calls to bypass standard Android security controls and maintain persistence after app removal. By using the AI agent to interpret dynamic UI elements, the threat actors effectively turn the phone's own interface into an adaptive navigation system that survives traditional uninstallation attempts. This development highlights critical vulnerabilities in how large language models can be weaponized for remote device control when exposed to untrusted inputs or misused within compromised environments.
RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions
RATHat Android malware uses Gemini AI to help take control of infected phones beyond normal app permissions. The banking trojan abuses a developer feature to establish a separate command channel that can survive removal of the malicious application until the phone reboots. Attackers distribute it through malicious adverts and phishing text messages targeting Europe, Latin […] The post RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions appeared first on Cyber Security News.
RATHat Android malware uses Gemini AI to help take control of infected phones beyond normal app permissions. The banking trojan abuses a developer feature to establish a separate command channel that can survive removal of the malicious application until the phone reboots. Attackers distribute it through malicious adverts and phishing text messages targeting Europe, Latin America and Southeast Asia. Fake apps lure victims into granting Accessibility access, extending the risks described in earlier RatHat banking attacks with deeper control over the device. Cleafy researchers identified three…
Extras afișat conform termenilor RSS ai publicației · 86 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN
Cybersecurity News · 21 sept. 2026
New Android Malware Steals Banking PINs and Reinstalls Itself After Users Delete It
Cybersecurity News · 17 sept. 2026
A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices
Cybersecurity News · 23 sept. 2026
The best Android phones of 2026: Expert tested and reviewed
ZDNet · 19 aug. 2026