From what I've seen in recent reports, RATs are getting smarter with AI integration for dodging detection. For example, some variants now use machine learning to change their behavior on the fly, making them harder for antivirus tools to spot. There's also a rise in mobile-focused RATs like those building off the old Cerberus codebase—stuff like Alien or ERMAC that's targeting Android devices for banking creds and crypto wallets.
On the desktop side, XWorm is popping up more as a sophisticated option, often delivered via clever social engineering tricks like "ClickFix" where victims unknowingly paste malicious PowerShell commands. And don't sleep on legitimate remote tools being hijacked—threat actors are abusing stuff like AnyDesk or TeamViewer for stealthy access without raising flags.
Interlock RAT got an update too, with new social engineering ploys like fake "FileFix" prompts that trick users into running commands.
Overall, RAT detections in command-and-control traffic are up, per some mid-2025 analyses, showing they're a bigger part of the malware ecosystem.
Interesting to see how RATs are evolving, never heard / saw about AI features integrated into RATs tho, do you have some examples ?
ClickFix and FileFix are new interesting methods, I didn't hear about Interlock RAT before, just read an article from socprime about it, thanks for the share
Interesting topic