{"id":24577,"date":"2026-10-06T08:00:12","date_gmt":"2026-10-06T11:00:12","guid":{"rendered":"https:\/\/www.ethicalhacker.com.br\/site\/?p=24577"},"modified":"2026-10-02T13:17:28","modified_gmt":"2026-10-02T16:17:28","slug":"rathat-o-avanco-do-malware-android","status":"publish","type":"post","link":"https:\/\/www.ethicalhacker.com.br\/site\/2026\/10\/exploits\/rathat-o-avanco-do-malware-android\/","title":{"rendered":"RATHAT: o avan\u00e7o do malware Android"},"content":{"rendered":"<div class=\"flex max-w-full flex-col gap-4 [&amp;&gt;div:has([data-free-thinking-preview-answer=true])+:is(.text-message,.relative:has(&gt;.text-message))]:-mt-2 grow\">\n<div class=\"TzNmiG_container gap-4 [&amp;&gt;div:has([data-free-thinking-preview-answer=true])+:is(.text-message,.relative:has(&gt;.text-message))]:-mt-2\" data-streaming-response-group=\"\">\n<div data-message-id=\"ddb02249-6eda-4843-94c5-765a96f75584\" data-message-author-role=\"assistant\" data-model-dil-v2-message=\"\">\n<div>\n<div class=\"puik-root not-prose not-markdown\" data-dil-widget-copy-target=\"\" data-theme=\"light\">\n<div class=\"fv0XaG_DilRenderer fv0XaG_DilResponseRoot J4E5kq_LegacyReveal dil-first-visible-layout w-full max-w-full\" dir=\"auto\" data-d-direction=\"col\" data-dil-talvt-render-state=\"ready\">\n<p class=\"w6asjq_TextBase GgxHUa_Title PDq2pG_selectionAnchorContainer\" style=\"text-align: justify;\" data-d-component=\"title\" data-d-size=\"xl\" data-d-weight=\"semibold\"><strong>RATHAT: o avan\u00e7o do malware Android e os riscos para contas banc\u00e1rias<\/strong><\/p>\n<p class=\"w6asjq_TextBase _85PZeG_Text\" style=\"text-align: justify;\" data-d-component=\"text\"><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">An\u00e1lise de ciberseguran\u00e7a | Malware m\u00f3vel e prote\u00e7\u00e3o financeira<\/span><\/strong><\/p>\n<p class=\"w6asjq_TextBase _85PZeG_Text\" style=\"text-align: justify;\" data-d-component=\"text\">A evolu\u00e7\u00e3o das amea\u00e7as para dispositivos m\u00f3veis demonstra que os criminosos est\u00e3o buscando formas cada vez mais sofisticadas de explorar smartphones. O RATHAT, malware associado ao sistema Android, chama a aten\u00e7\u00e3o por seu potencial de comprometer credenciais e informa\u00e7\u00f5es financeiras, colocando em risco usu\u00e1rios que utilizam o celular para opera\u00e7\u00f5es banc\u00e1rias.<\/p>\n<p class=\"w6asjq_TextBase _85PZeG_Text\" style=\"text-align: justify;\" data-d-component=\"text\">Para os profissionais de seguran\u00e7a, o cen\u00e1rio refor\u00e7a a necessidade de analisar n\u00e3o apenas a origem dos aplicativos, mas tamb\u00e9m o comportamento dos c\u00f3digos maliciosos e os mecanismos utilizados para contornar as prote\u00e7\u00f5es do sistema.<\/p>\n<p data-d-component=\"text\">\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div style=\"text-align: justify;\">\n<div class=\"puik-root not-prose not-markdown\" data-dil-widget-copy-target=\"\" data-theme=\"light\">\n<p>&nbsp;<\/p>\n<p><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">Como o RatHat atua no dispositivo<\/span><\/strong><\/p>\n<p>De acordo com a an\u00e1lise da empresa de seguran\u00e7a Zimperium, o RatHat combina t\u00e9cnicas tradicionais de malware Android com recursos de intelig\u00eancia artificial para automatizar a intera\u00e7\u00e3o com aparelhos comprometidos. O c\u00f3digo malicioso pode explorar o Servi\u00e7o de Acessibilidade e recursos de depura\u00e7\u00e3o sem fio do Android, ampliando sua capacidade de navegar pelo dispositivo e acessar informa\u00e7\u00f5es sens\u00edveis.Entre os alvos potenciais est\u00e3o senhas banc\u00e1rias, c\u00f3digos de autentica\u00e7\u00e3o, credenciais de acesso e informa\u00e7\u00f5es utilizadas para desbloquear o celular. O uso de IA permite adaptar determinadas a\u00e7\u00f5es ao conte\u00fado exibido na tela, em vez de depender exclusivamente de sequ\u00eancias de comandos predefinidas.<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">Principais riscos para os usu\u00e1rios<\/span><\/strong><\/p>\n<p>O comprometimento de um smartphone por esse tipo de amea\u00e7a pode resultar em:<\/p>\n<ul class=\"PSWZZq_List\" data-d-component=\"list\" data-d-marker=\"bullet\" data-d-marker-layout=\"native\">\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Roubo de credenciais banc\u00e1rias e informa\u00e7\u00f5es pessoais.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Intercepta\u00e7\u00e3o de c\u00f3digos de autentica\u00e7\u00e3o.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Abuso de permiss\u00f5es de acessibilidade.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Controle remoto de determinadas fun\u00e7\u00f5es do aparelho.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Aumento do risco de fraudes financeiras e comprometimento de contas.<\/div>\n<\/li>\n<\/ul>\n<p>A utiliza\u00e7\u00e3o de intelig\u00eancia artificial n\u00e3o significa que o malware seja invenc\u00edvel. Entretanto, a capacidade de adaptar comportamentos pode dificultar a identifica\u00e7\u00e3o de padr\u00f5es maliciosos por mecanismos de seguran\u00e7a baseados exclusivamente em regras fixas.<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">Medidas de prote\u00e7\u00e3o<\/span><\/strong><\/p>\n<p>Para reduzir a exposi\u00e7\u00e3o a amea\u00e7as semelhantes, recomenda-se:<\/p>\n<ul class=\"PSWZZq_List\" data-d-component=\"list\" data-d-marker=\"bullet\" data-d-marker-layout=\"native\">\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Instalar aplicativos exclusivamente de fontes confi\u00e1veis.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Evitar APKs obtidos por links desconhecidos.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">N\u00e3o conceder permiss\u00f5es de acessibilidade sem necessidade leg\u00edtima.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Manter o Android e os aplicativos atualizados.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Desativar op\u00e7\u00f5es de depura\u00e7\u00e3o que n\u00e3o estejam sendo utilizadas.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Ativar mecanismos de prote\u00e7\u00e3o contra aplicativos maliciosos.<\/div>\n<\/li>\n<li class=\"PSWZZq_Item\" data-d-component=\"list-item\" data-d-marker-layout=\"native\">\n<div class=\"PSWZZq_Label\" data-d-list-item-content=\"\">Monitorar movimenta\u00e7\u00f5es banc\u00e1rias e notifica\u00e7\u00f5es de seguran\u00e7a.<\/div>\n<div data-d-list-item-content=\"\"><\/div>\n<div data-d-list-item-content=\"\"><\/div>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Conclus\u00e3o<\/strong><\/p>\n<p>O RatHat demonstra como a combina\u00e7\u00e3o entre malware m\u00f3vel, abuso de permiss\u00f5es e automa\u00e7\u00e3o por intelig\u00eancia artificial pode ampliar os riscos para usu\u00e1rios de smartphones. A amea\u00e7a refor\u00e7a a necessidade de uma abordagem de seguran\u00e7a que considere tanto as t\u00e9cnicas tradicionais de infec\u00e7\u00e3o quanto a capacidade de adapta\u00e7\u00e3o dos novos c\u00f3digos maliciosos.<span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">A prote\u00e7\u00e3o do dispositivo come\u00e7a pela redu\u00e7\u00e3o das permiss\u00f5es desnecess\u00e1rias e pelo controle rigoroso dos aplicativos instalados.<\/span> Atualiza\u00e7\u00f5es, aten\u00e7\u00e3o aos sinais de engenharia social e monitoramento das contas financeiras continuam sendo medidas fundamentais para reduzir o impacto de ataques cada vez mais sofisticados.<\/p>\n<p>&nbsp;<\/p>\n<p class=\"w6asjq_TextBase GgxHUa_Title\" data-d-component=\"title\" data-d-size=\"lg\" data-d-weight=\"semibold\"><strong>Refer\u00eancias bibliogr\u00e1ficas<\/strong><\/p>\n<ul>\n<li class=\"fv0XaG_DilRenderer fv0XaG_DilResponseRoot J4E5kq_LegacyReveal dil-first-visible-layout w-full max-w-full\" dir=\"auto\" data-d-direction=\"col\" data-dil-talvt-render-state=\"ready\"><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">TecMundo.<\/span><\/strong> <span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-font-style=\"italic\" data-d-inline=\"\">RatHat: novo v\u00edrus para Android usa IA para roubar senhas e contas de banco.<\/span><a class=\"Uwo0ZW_Link\" href=\"https:\/\/www.estadao.com.br\/tecmundo\/ciberseguranca\/rathat-novo-virus-para-android-usa-ia-para-roubar-senhas-e-contas-de-banco\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-d-component=\"link\"><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-inline=\"\" data-d-text-decoration=\"underline-dotted\">Acessar a mat\u00e9ria <\/span><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-has-width=\"true\" data-d-inline=\"\">original<\/span><\/a><\/li>\n<li class=\"fv0XaG_DilRenderer fv0XaG_DilResponseRoot J4E5kq_LegacyReveal dil-first-visible-layout w-full max-w-full\" dir=\"auto\" data-d-direction=\"col\" data-dil-talvt-render-state=\"ready\"><strong><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-default-strong=\"\" data-d-inline=\"\">Zimperium.<\/span><\/strong> <span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-font-style=\"italic\" data-d-inline=\"\">RatHat: AI-Powered Mobile Threat is Here for Your Credentials &amp; Bank Accounts.<\/span> An\u00e1lise t\u00e9cnica do malware e de suas t\u00e9cnicas de comprometimento de dispositivos Android. <a class=\"Uwo0ZW_Link\" href=\"https:\/\/zimperium.com\/blog\/rathat-ai-powered-mobile-threat-is-here-for-your-credentials-bank-accounts\" target=\"_blank\" rel=\"noopener noreferrer\" data-d-component=\"link\"><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-inline=\"\" data-d-text-decoration=\"underline-dotted\">Acessar a an\u00e1lise da <\/span><span class=\"w6asjq_TextBase _85PZeG_Text\" data-d-component=\"text\" data-d-has-width=\"true\" data-d-inline=\"\">Zimperium<\/span><\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p class=\"pointer-events-none -mb-px h-px w-full opacity-0\" style=\"text-align: justify;\" aria-hidden=\"true\">\n","protected":false},"excerpt":{"rendered":"<p>RATHAT: o avan\u00e7o do malware Android e os riscos para contas banc\u00e1rias An\u00e1lise de ciberseguran\u00e7a | Malware m\u00f3vel e prote\u00e7\u00e3o financeira A evolu\u00e7\u00e3o das amea\u00e7as para dispositivos m\u00f3veis demonstra que os criminosos est\u00e3o buscando formas cada vez mais sofisticadas de explorar smartphones. O RATHAT, malware associado ao sistema Android, chama a aten\u00e7\u00e3o por seu potencial [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":24578,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[89,100,21,105],"tags":[],"class_list":["post-24577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-basico","category-diversos","category-exploits","category-noticias"],"_links":{"self":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/24577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/comments?post=24577"}],"version-history":[{"count":14,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/24577\/revisions"}],"predecessor-version":[{"id":24592,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/24577\/revisions\/24592"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/media\/24578"}],"wp:attachment":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/media?parent=24577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/categories?post=24577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/tags?post=24577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}