# Say Hello to RatHat, a New AI-Powered Malware Invading the Android Ecosystem

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-20 19:29 UTC · Category: Technology · Sources: 6 · Current Velocity: 3.67

## Key People, Organizations & Locations
Android, AI-powered, Malware, Ecosystem, Invading, New, Say, RatHat, Hello

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Pasquale Pillitteri | Zimperium unveils RatHat, an Android malware driven by AI | 2026-09-21 22:10 | [Source Link](https://news.google.com/rss/articles/CBMihgFBVV95cUxNVkFuR1J1Zmx3T21RazVKS1hFbFVVdTFqb0M0aTJFQm5ydmY5eHVnN2dBSjkyZU1uaEdrVlVkT0U4OHZhbS1YYlpkS3E1N2I4cFRFMGxZdkNpZG83cEZCeTZuQm1vNmxpTVZ2ODh6N3Y3U0Nranc3UTBHQnA1ZmQtZVVTVmtGQQ?oc=5) |
| Mashable | RatHat is a new Android malware that records your screen touches to steal passwords | 2026-09-21 22:10 | [Source Link](https://news.google.com/rss/articles/CBMie0FVX3lxTE5sZkc0eDJIRGtpWlZtbTRLem9ubEI1ZXVLNWdXTDVlbEF1QTNYXzdwSTF2MkE4QTE2MFJiQl9iMzJCcVA5OHR6eWZIeGotRmFScklhZjMzdWs4N09uWEMxMlZubnc1NE13cjA1MjFHSExuUXQ1cjl2dmxCUQ?oc=5) |
| securityweek.com | RatHat Android Trojan Uses AI for Automation | 2026-09-20 13:20 | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTFBlQmJ5MDg1akdFTGRQcjRXbTlNWEhHS2RxVURObnJXMUNWa3BmcktjR04yQVpWQS1nYWtUMDBEQ3NEQzZLLUlHMmswa056T3BLOEhGVmNyQUk0THJYZXBHNXVKR0JmUktwd1lzcU1TSzVFWmx4RVdRWWRFY3MzaW_SAYQBQVVfeXFMUDloT29CVGNFY0JBOVJSVUtsWTVKRkMxaWE0WUw0Y0xSRXI3X1I3Q2dyaUhObzdRR1cyWDdlbWswRTZ5RUxrVjdSMGUtVFlsWEF3QVNaV0pjdVg4bzU1S1VPLV9pc1UxX1ZOTjhXTzhsT3l2NldXMHUtRUJUbmVLalhFMm5t?oc=5) |
| Računalniške novice | Smart AI takes control of Android phones | 2026-09-20 13:20 | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxPeUg4cTd2azNsTzA1bk9wM3hQNW5JbnJmZFpNTVJZWllXVlprMDhsVVBZUGVJMVFHU1pQbS1meENIbkNCWUduTjQ0a3JSSzQ0ZTNGVWJzNE1MVUJNTGVoSzZVdVlQNFdWS20zTTBZMHpQZEtFWWgzRUVSX1hCeElMNk5tbmZJNXhfVHRSNmpDbXdMTFdJbEJKS2lHUFAxRDYzVVZj?oc=5) |
| Inshorts | New Android malware uses AI to steal bank logins, remains after deletion - Do factory reset if device infected with RatHat | 2026-09-20 13:20 | [Source Link](https://news.google.com/rss/articles/CBMitgFBVV95cUxNZUdNZHJodHdsajhucU1BZ2ZESU55M0l1a3pXeUFzdVNPbVJiX2pEZVN2WVhLa21Wdms5aTBXdVlxLXM0UXdvSC1EemZIZkw5NVQ0U1dxcmtOTFF2SXJULVVRbWhFSkpEd05lT200eU9vV2Izd1JJWnZpRjBNUnZKdXhTTDU4VnY5aUtMSmM3RHU5bDV5QjBNTm1NYURodGpZbm9FS0Q0S1ZDQXpCVDl6My1IUGpEUdIBuwFBVV95cUxQQzFHeDVtVUg3YTZMMm96bE1xdGg4dER4TktYUzFtRUw5Ry1jT3dSb2psMmppWENpczZQUTg4Z2ZoN25iUzg4dF96SHFTcXRRXzVzN2pVOFlnYjNsNnZjRlZIeDhhb1Y0ZVU5SzRkYnhUYjdJN1hIQmhPU25Xa0RSLUZNOEJOX1QxRTgtbnQ1VFpFbHN4NlZXR09WdTB) |
| CNET | Say Hello to RatHat, a New AI-Powered Malware Invading the Android Ecosystem | 2026-09-20 13:20 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxNWjFiTm9BYkE5TmtQUXNZdVZtR2N2M1l2TkswcU5RR3M0MExsVmVhVEtlcUZuMWw4UHhneXRJaUNsdUxaZEU5bWRSQTVEenR0UnVjLUJmZGRJV0hyaW03RFA2ay1tbjNGODFxZFZJMnRsb3hSeTQ2M0hhcmdjaXVKNUthM1NMMkhjU1dNblZmNA?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-20/say-hello-to-rathat-a-new-ai-powered-malware-invading-the-android-ecosystem*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*
