Skip to content
PromptFlux Malware Utilizes Gemini AI for Dynamic Code Mutation

PromptFlux Malware Utilizes Gemini AI for Dynamic Code Mutation

First seen 5 Nov 2025, 17:08 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Google has identified a new malware named PromptFlux, which employs a VBScript dropper to dynamically rewrite and mutate its own code in real time using the Gemini API. This malware can adapt its code structure hourly, making it difficult for traditional static defenses to detect and mitigate. The evolving nature of PromptFlux poses challenges for cybersecurity teams in managing vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Promptflux in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed