security1 publisher
RatHat self-pairs Android's debug bridge to survive its own uninstall
Zimperium says RatHat uses an accessibility grant to switch on Wireless Debugging and read its own 6-digit pairing code, leaving native daemons at shell privilege that keep answering after the app is removed.
Publishers:thehackernews.com
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+25
- Incentives75
- Confidence50