RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Operators of the RatHat Android banking trojan are deploying a malware-as-a-service web console that integrates the Gemini AI to analyze infected devices and pinpoint high-value targets. Nearly one hundred deployments of the console have been tracked since April, highlighting the growing integration of AI tools within malicious operational infrastructure.