ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow.

The PromptSpy Android malware, created by Chinese developers, uses Gemini AI at runtime to achieve persistence on devices.

PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based remote device control.

A new Android malware implant using Google Gemini to perform persistence tasks was discovered on VirusTotal and analyzed by ESET ...

Security researchers uncover PromptSpy, the first Android malware to use Google’s Gemini AI for persistence and remote access.

A newly-uncovered malware targeting the Android operating system seems to exploit Google’s Gemini GenAI tool to help it maintain persistence.

First Android malware uses generative AI to maintain persistence, enabling remote device control and blocking removal attempts..

ESET has uncovered PromptSpy, Android malware that uses Gemini to stay running, spy on devices and make removal attempts more difficult.