Banking malware

RatHat Android Malware Steals Banking PINs and Can Reinstall Itself After Removal

Zimperium researchers uncovered RatHat, an Android malware strain that combines Accessibility abuse, local ADB pairing, banking overlays and persistent native components to steal credentials and regain access even after the visible app is removed.