Cyberinsider

PromptFlux Malware Utilizes Gemini AI for Dynamic Code Mutation

First seen 5 Nov 2025, 17:08 UTC • Thehackernews

•44.1

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Google has identified a new malware named PromptFlux, which employs a VBScript dropper to dynamically rewrite and mutate its own code in real time using the Gemini API. This malware can adapt its code structure hourly, making it difficult for traditional static defenses to detect and mitigate. The evolving nature of PromptFlux poses challenges for cybersecurity teams in managing vulnerabilities.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

Google Identifies AI-Driven Malware Families with Self-Modifying Capabilities Google GTIG Reports Shift in AI Misuse by Cyber Adversaries PromptSpy: First Android Malware Utilizing Generative AI Discovered Gemini AI Misused for Developing Self-Modifying Malware by Cybercriminals Debate on AI SOC Agents and Security Outcomes State-Sponsored Hackers Exploit Google's Gemini AI for Cyberattacks

PromptFlux Malware Utilizes Gemini AI for Dynamic Code Mutation

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading