PromptSpy: First Android Malware Utilizing Generative AI Discovered

ESET researchers have identified PromptSpy, the first Android malware to incorporate generative AI, specifically Google’s Gemini, in its execution flow. This malware utilizes AI to manipulate the user interface and maintain persistence on infected devices, capturing sensitive data and preventing uninstallation. PromptSpy represents a significant evolution in mobile threats, following the earlier discovery of AI-powered ransomware, PromptLock.