PromptSpy Android Malware Uses Google Gemini to Adapt During Runtime Execution

A newly identified strain of Android spyware called PromptSpy has become the first mobile malware known to call on generative AI while it is actually running on a victim’s device. Rather than relying purely on hardcoded commands, the malware reaches out to Google’s Gemini model in real time to figure out how to interact with a phone’s screen. This marks a meaningful shift in how mobile threats could evolve, since the malware is no longer limited to a fixed set of instructions written by its creators. On the surface, PromptSpy behaves like a fairly standard remote access trojan built for stealing information from infected phones. It can capture lockscreen PINs and passwords, list installed apps, snap screenshots...

Läs hela artikeln hos källan.