ESET Reports Surge in Malicious AI Skills and Evolving Cyber Threats

ESET's H1 2026 Threat Report reveals significant advancements in cyber threats, particularly through the use of artificial intelligence (AI). An analysis of nearly 900,000 AI skills identified over 25,000 suspicious and thousands of malicious instances, expanding the attack surface. The report highlights PromptSpy, the first known Android malware utilizing generative AI, which adapts its behavior based on user interface elements. Social engineering tactics have evolved, with ClickFix techniques doubling in detection rates, and QR code phishing has reached record levels. Ransomware activity remains high, with over 100 EDR killers documented. The report suggests a shift in user behavior and trust dynamics, complicating detection and response efforts.

Key Points: • Over 25,000 suspicious AI skills identified, expanding the attack surface. • PromptSpy is the first Android malware using generative AI for execution. • ClickFix and QR code phishing tactics have seen significant increases in activity.