Cybercriminals have found a disturbing new use for generative AI: letting it do the reconnaissance. A newly documented Android malware operation called RatHat has built Gemini directly into its command-and-control console, using the AI model to automatically score and rank infected devices by their likely financial value — so operators can focus their attention where the payoff is biggest. It is one of the clearest real-world examples yet of AI being weaponized not to write malware, but to make existing malware smarter, as detailed by The Hacker News. The tactic signals a maturation in how threat actors operationalize AI tools, moving well beyond prompt-injected phishing text into live, decision-making infrastructure.
The implications are significant. For years, the bottleneck in large-scale mobile fraud has been human attention — sifting through thousands of compromised devices to find the ones worth exploiting manually. RatHat’s Gemini integration effectively automates that triage, and it raises a parallel that security researchers are already drawing to autonomous agent risks seen in consumer AI platforms. When AI starts making prioritization decisions inside a criminal operation, the scale and speed of harm can increase without any proportional increase in the attacker’s workforce.
How RatHat Profiles Victims in Real Time
According to the report from The Hacker News, the RatHat console harvests a wide range of device telemetry once it gains a foothold on an infected Android handset — installed banking apps, account balance indicators, geographic region, device model, and carrier data among them. That metadata is then passed to Gemini via API, which generates a victim profile and assigns a priority tier. Operators reportedly see a ranked queue inside the console’s dashboard, letting them allocate manual effort to the top-ranked targets first. The system essentially functions as an AI-powered sales lead sorter, except the product being sold is stolen financial access.
The use of an external, commercially available model like Gemini rather than a purpose-built local classifier is notable. It keeps the malware payload itself lightweight — there is no bulky on-device inference engine to flag antivirus heuristics — while still delivering sophisticated analytical output. It also means the operation is renting intelligence rather than building it, a low-overhead strategy that mirrors how legitimate SaaS businesses scale. Security teams are now contending with the reality that the same API keys powering enterprise productivity tools can be quietly requisitioned for criminal triage pipelines.
What This Means for Mobile Security Going Forward
RatHat does not appear to be an isolated experiment. The broader trend, which researchers have been tracking through 2025 and into 2026, is threat actors integrating AI at the operational layer rather than the code layer. Writing malware with ChatGPT generated headlines two years ago; embedding Gemini into a live C2 console to optimize victim selection is a more sophisticated and, frankly, more dangerous evolution. It suggests organized criminal groups are hiring or consulting people with legitimate ML engineering backgrounds — individuals who know how to wire an API, structure a prompt for consistent JSON output, and build a dashboard that non-technical operators can actually use.
For defenders, the countermeasure calculus shifts. Traditional indicators of compromise — suspicious network calls, abnormal permission requests, known malicious domains — remain relevant, but they do not directly reveal the AI-assisted targeting layer happening server-side. Google has not publicly commented on whether it has identified and revoked the API credentials associated with RatHat’s Gemini usage, which is itself a policy question the industry will need to answer at scale. This development also puts fresh pressure on mobile platform gatekeepers to scrutinize how apps request and relay device telemetry that, in the wrong hands, becomes raw training data for an AI-driven criminal ranking engine. The Gemini security conversation is no longer confined to government or enterprise contexts — it is now a street-level mobile threat.
