RatHat Go Agent Hardware-Level Touch Keylogger via getevent

Ibrahim Saud@tektrix

•updated Sep 18, 2026•1•0•4

Detects the execution of the Android system utility 'getevent' by suspicious processes or in contexts suggesting unauthorized input event monitoring. This may indicate an attempt to capture user input, touch events, or screen interaction data.