Skip to content
PromptFlux Malware Uses Gemini AI for Real-Time Code Mutation

PromptFlux Malware Uses Gemini AI for Real-Time Code Mutation

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Google has identified a new malware named PromptFlux, which employs a VBScript dropper that utilizes the Gemini API to dynamically rewrite and mutate its own code. This malware is designed to evade detection by altering its code structure in real time, posing challenges for cybersecurity defenses. The implications of this malware highlight the evolving landscape of threats in cybersecurity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Promptflux in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed