RatHat Malware Leverages Gemini to Target High-Value Android Victims

RatHat, an Android banking trojan distributed as malware-as-a-service, has infected nearly 100 targets since April 2026 by using Google's Gemini model to estimate victims' bank balances and rank them for maximum impact, according to the article. The malware targets high-value Android users, putting them at risk of financial theft.

Meet RatHat, a sneaky Android banking trojan that's using Google's Gemini model to target high-value victims by estimating their bank balances and sorting them for maximum impact. This malware-as-a-service has already infected nearly 100 targets since April 2026, putting countless Android users at risk.