Fruitshell Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 5, 2025
Last Seen
February 19, 2026

Fruitshell is a malware family highlighted in recent reports as part of the AI-enabled threat landscape in early November 2025.

Overview

Fruitshell is a malware family highlighted in recent reports as part of the AI-enabled threat landscape in early November 2025. The articles describe attackers using large language models and other AI techniques to automate, obfuscate, and accelerate malware campaigns. This trend increases the sophistication and potential stealth of threats like Fruitshell, making detection and attribution more challenging.

Related Threat Clusters

  • Google Identifies AI-Driven Malware Families with Self-Modifying Capabilities

    Google's Threat Intelligence Group has discovered at least five new malware families that utilize artificial intelligence for self-modification during execution. This technique, referred to as 'just-in-time'…

    2 articles · Updated November 5, 2025
  • PromptSpy: First Android Malware Utilizing Generative AI Discovered

    ESET researchers have identified PromptSpy, the first Android malware to incorporate generative AI, specifically Google’s Gemini, in its execution flow. This malware utilizes AI to manipulate the user interface and…

    39 articles · Updated February 19, 2026
  • Debate on AI SOC Agents and Security Outcomes

    The discussion around AI Security Operations Centers (SOCs) is evolving, with Gartner's report highlighting the mainstream recognition of AI's potential in enhancing SOC functions. However, critiques emphasize that…

    52 articles · Updated November 16, 2025

Recent Intelligence Reports

  • PromptSpy Android malware may exploit Gemini AI — Computerweekly · February 19, 2026
  • AI Malware Detected in the Wild as Threats Evolve — Thecyberexpress · November 7, 2025
  • Google researchers detect first operational use of LLMs in active malware campaigns — Csoonline · November 6, 2025
  • AI — Cybersecuritydive · November 5, 2025
  • Google warns of new AI — Bleepingcomputer · November 5, 2025

CVSS v3.1 Breakdown