Home / Technology / AI powers Chinese Android banking trojan
AI powers Chinese Android banking trojan
19 Sep
Summary
- New RedHat malware uses an AI assistant.
- AI allows trojan to interpret screen layouts.
- Malware bypasses app redesigns for credential theft.
Security researchers at Zimperium zLabs have identified a new Android banking trojan, dubbed RedHat, which exhibits Chinese origins. This malware distinguishes itself through the integration of an AI assistant. This AI component acts as an intelligent agent, interpreting the device's screen interface dynamically.
Traditionally, banking trojans required manual coding for specific app layouts, making them vulnerable to app updates. RedHat's AI bypasses this limitation by analyzing screen layouts in real-time. The AI then provides instructions to the malware, facilitating the theft of login credentials and sensitive banking information.
RedHat is disseminated via unofficial app stores, social media platforms, malvertising, and SMS spam. It also employs sophisticated persistence mechanisms, including the ability to cancel uninstallation attempts by displaying false error messages to the user.
