Google catches “first AI-assisted zero-day” as well as autonomous Android malware

Google threat intelligence claims to have identified the first known case of cyber attackers using AI to help develop a zero-day exploit. Elsewhere, LLMs are being used to hide malware and create deepfake-driven influence campaigns.

In a report published Monday, GTIG says that criminals are rapidly moving on from using AI in phishing campaigns and for chat bot high jinx to embedding it directly into offensive hacking operations.

The report’s headline finding centers on a cyber crime operation involving a zero-day vulnerability in a popular open-source, web-based system administration tool.

“Our analysis of exploits associated with this campaign identified a zero-day vulnerability implemented in a Python script that enables the user to bypass two-factor authentication (2FA) on a popular open-source, web-based system administration tool.”

According to GTIG, the exploit enabled two-factor authentication bypass and was intended for “a mass vulnerability exploitation operation" before researchers disrupted the operation.

Google declined to identify either the threat actor or the affected open-source platform, and it does not name the LLM model it believes was used, although it explicitly ruled out its own AI, Gemini and Claude's advanced bug catcher Mythos.

The finding comes as major AI companies are positioning advanced AI models such Anthropic AI's Mythos and Open AI's ChatGPT 5.5 for bug discovery and software auditing. Google notes however, that these capabilities are just as likely to be used by adversaries "as expert-level force multipliers for vulnerability research and exploit development, including for zero-day vulnerabilities."

The Google report details how the flaw operated: allowing attackers to bypass two-factor authentication because of a weakness in how the system handled trusted logins.

GTIG believes the vulnerability was hard for traditional security tools to spot because the software appeared to function normally, despite containing a serious security flaw.

Researchers think the AI may have helped develop the exploit because advanced models are good at spotting subtle logic flaws that conventional scanners can miss.

GTIG said it concluded with “high confidence” that AI-assisted tools were involved, citing signs including “educational docstrings,” a “hallucinated CVSS score,” and a highly structured Python coding style commonly associated with large language models.

Separately, Google also highlighted a new wave of autonomous Android malware called Promptspy, an Android backdoor that integrates Google’s Gemini models into live malware operations.

GTIG said the malware represents a shift toward "autonomous attack orchestration” where AI systems independently scan victim environments and generate commands in real time.

Promptspy reportedly uses a module called “GeminiAutomationAgent” to analyze Android interface layouts, calculate screen geometry and execute actions such as “Click” and “Swipe” through simulated gestures.

The malware can also replay authentication gestures, including lock patterns, and PIN activity, to regain device access.

To prevent removal the malware tools overlays invisible touch interceptors on uninstall buttons, making them appear unresponsive.

According to Google, no apps containing Promptspy were found on Google Play.

“Android users now are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services,” it adds.

Elsewhere the report details how cybercriminals are using AI to create stealthier malware capable of “decoy logic” and junk code insertion to disguise malicious behaviour and evade detection.

Beyond cyber intrusions, GTIG said threat actors from Russia, China and Saudi Arabia are increasingly using AI generated media to amplify influence operations.

In one example, researchers linked a pro-Russian “Operation Overload” campaign to suspected AI voice cloning used to impersonate journalists and manipulate news footage.

Unlock more exclusive Cybernews content on YouTube.