MediumNewsLLM-specific
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
- Published
- Record updated
Summary
ESET researchers analyzed PromptSpy, which they describe as the first Android malware to use generative AI during execution. It deploys a VNC module for full remote control of the device, captures the lockscreen PIN or password, and records the screen to obtain the unlock pattern, while using Google's Gemini chatbot to decide where to tap or swipe to lock itself in the recent apps list. ESET has not seen infections in the wild and says it may be a proof of concept, though a domain appears designed to deliver it to users in Argentina.
Related items
- InfoGemini for Home now plugs into AT&T’s smart security systemSame vendor · The Verge (AI)
- InfoCrowdStrike to acquire Fiddler, Dreadnode to extend AI security across agent lifecycleSame vendor · CSO Online
- MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSame vendor · BleepingComputer
- InfoOpenAI says ChatGPT is catching up to Google in searchSame vendor · The Verge (AI)
- InfoGoogle is entirely disabling Search in schools that don’t want AISame vendor · The Verge (AI)