GoKawiilArcticRAT Android malware now uses AI to mine stolen data for fraud
Zimperium researchers reported that ArcticRAT, an Android remote access Trojan that began as a cryptocurrency stealer targeting 11 specific apps, has evolved into a full RAT capable of real-time device control. The malware now uses large language model services to automatically scan stolen SMS messages and other harvested data for financial information attackers can exploit, and employs a black, un-dismissible screen overlay to hide its activity from victims.