RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Researchers flagged new Android malware RatHat, operated by China-based threat actors, that abuses ADB to retain shell access after uninstall. It uses an AI-powered system to navigate and control compromised devices, distributed via smishing and malvertising campaigns leading to deceptive third-party download portals, posing a persistent security risk.