PromptSpy Android Malware Uses Google Gemini to Adapt During Runtime Execution

A newly identified strain of Android spyware called PromptSpy has become the first mobile malware known to call on generative AI while it is actually running on a victim’s device. Rather than relying purely on hardcoded commands, the malware reaches out to Google’s Gemini model in real time to figure out how to interact with a phone’s screen. This marks a meaningful shift in how mobile threats could evolve, since the malware is no longer limited to a fixed set of instructions written by its creators. On the surface, PromptSpy behaves like a fairly standard remote access trojan built for stealing information from infected phones. It can capture lockscreen PINs and passwords, list installed apps, snap screenshots...

Read the full article at the source.