ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow.

PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based remote device control.

The PromptSpy Android malware, created by Chinese developers, uses Gemini AI at runtime to achieve persistence on devices.

A newly-uncovered malware targeting the Android operating system seems to exploit Google’s Gemini GenAI tool to help it maintain persistence.

A new Android malware implant using Google Gemini to perform persistence tasks was discovered on VirusTotal and analyzed by ESET ...

ESET has uncovered PromptSpy, Android malware that uses Gemini to stay running, spy on devices and make removal attempts more difficult.

First Android malware uses generative AI to maintain persistence, enabling remote device control and blocking removal attempts..