{"data":{"id":"c4165092-ece2-4ce2-b93e-7dbe44cb40f3","title":"PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence","summary":"ESET researchers analyzed PromptSpy, which they describe as the first Android malware to use generative AI during execution. It deploys a VNC module for full remote control of the device, captures the lockscreen PIN or password, and records the screen to obtain the unlock pattern, while using Google's Gemini chatbot to decide where to tap or swipe to lock itself in the recent apps list. ESET has not seen infections in the wild and says it may be a proof of concept, though a domain appears designed to deliver it to users in Argentina.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.securityweek.com/promptspy-android-malware-abuses-gemini-ai-at-runtime-for-persistence/","publishedAt":"2026-02-20T07:06:15.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Gemini"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}