Security researchers have identified two Android banking malware strains that use artificial intelligence to target bank PINs and login credentials. A report citing Cleafy says nearly 100 RatHat distribution cases were identified between April and September 2026, while operators remotely controlled infected devices through a web console. Android users should avoid untrusted app installations and review excessive permissions, especially on devices used for banking.