AI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes

**Executive Summary:** RatHat is an AI-powered Android banking trojan analyzed by zLabs that automates device compromise by abusing Accessibility services, enabling Wireless Debugging/ADB pairing, installing native agents (including a Go-based command agent and reverse proxy), and using credential-harvesting overlays, SMS interception, and raw touch-coordinate collection to steal banking credentials, OTPs, PINs and unlock patterns; distribution is via smishing and malicious download pages, and remediation may require a factory reset.