RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to rank victims.