Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to ...
RatHat Android malware abuses Accessibility and ADB pairing to gain shell access and retain control after uninstall.