RatHat Android malware uses an AI-powered user interface automation engine that serializes the live Accessibility tree and sends it to an AI assistant to identify UI elements and generate navigation commands. This allows operators to remotely control infected devices without real-time interaction. The malware abuses Accessibility permissions to enable Developer Options and Wireless Debugging, gaining ADB shell-level access to install a Go-based agent (liblocal-service.so) that runs commands, bypasses battery restrictions, and maintains persistence by restoring itself and the agent if removed. A second agent (libmedia_codec.so) establishes a persistent reverse-proxy tunnel to the attacker. RatHat captures credentials via HTML overlays targeting banking and cryptocurrency apps, intercepts SMS and notifications including OTPs, records text changes, extracts URLs, and captures lock-screen PINs and patterns. It thwarts removal by intercepting uninstall confirmation and displaying fake Google Play overlays. Anti-analysis techniques include APK container tampering, a large manifest file, and invalid DEX instructions. Distribution vectors include malvertising, SMS, and phishing sites offering APK downloads outside Google Play. Researchers link the malware to Chinese threat actors based on AI prompt language.

RatHat enables attackers to gain persistent, high-privilege control over infected Android devices without requiring physical access or external debugging hardware. It can steal sensitive user credentials, including banking and cryptocurrency account information, intercept SMS messages and one-time passwords, and capture lock-screen authentication data. The malware's AI-driven interface automation makes detection and removal more difficult, increasing the risk of prolonged compromise. Its persistence mechanisms ensure it can restore itself and maintain access even after partial removal attempts. The malware's ability to establish a reverse-proxy tunnel further facilitates covert command and control communications.

No official patch or fix is available as this is malware rather than a software vulnerability. Users should avoid downloading APK files from outside Google Play unless the publisher is explicitly trusted. Accessibility permissions should not be granted to untrusted apps. Regular scanning with Google Play Protect or equivalent mobile security solutions is recommended. Users should be cautious of malvertising, SMS, and phishing sites promoting APK downloads. Due to the malware's anti-removal techniques, manual removal may be difficult and professional assistance may be required.