{"rewrite":{"id":"r_a8eba6d240daf467f4342e48","clusterId":"c_db0f84e871ab03cb922b49fa","slug":"eset-discovers-first-android-malware-exploiting-generative-ai","model":"deepseek-v4-flash","headline":"ESET Discovers First Android Malware Exploiting Generative AI","summary":"ESET researchers have identified PromptSpy, the first Android malware to use generative AI. It exploits Google Gemini to analyze screens and issue instructions for persistence, preventing forced termination. The malware deploys a VNC module for remote device control and targets users in Argentina, with development clues pointing to a Chinese-language environment.","whyItMatters":"PromptSpy marks the first known use of generative AI in Android malware, giving attackers the ability to adapt to different devices and OS versions through dynamic UI analysis.","webCardHtml":"\u003cp\u003eESET researchers have uncovered PromptSpy, the first Android malware family that leverages generative AI in its execution flow. The malware uses Google Gemini to interpret on-screen elements on compromised devices and generate step-by-step instructions that keep the malicious app pinned in the recent apps list, preventing forced termination by the system or swipe deletion. While the AI component is limited to persistence, it allows the malware to adapt to different device layouts and OS versions.\u003c/p\u003e\u003cp\u003ePromptSpy\u0026#39;s primary function is to deploy a built-in VNC module, giving attackers remote control over the victim\u0026#39;s device. It also exploits accessibility services to block uninstallation, capture lock screen data, and record video. Communication with the command-and-control server uses the VNC protocol with AES encryption. ESET reports that the campaign appears financially motivated and primarily targets users in Argentina, with development clues suggesting a Chinese-language environment. The malware is distributed through dedicated websites, not Google Play, and Google Play Protect automatically blocks known versions.\u003c/p\u003e","blueskyPost":"ESET found PromptSpy, the first Android malware using generative AI. It exploits Gemini to stay active and deploys a VNC module for remote control. Targets Argentina users.","twitterPost":"ESET discovered PromptSpy, the first Android malware to use generative AI. It exploits Gemini to prevent forced termination and deploys a VNC module for remote control.","threadsPost":null,"newsletterBlurb":"ESET researchers have identified PromptSpy, the first Android malware to incorporate generative AI. It uses Google Gemini to analyze screens and issue instructions for persistence, then deploys a VNC module for remote device control. The campaign appears financially motivated and primarily targets users in Argentina.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/412/4412414/?rss\",\"title\":\"AI-Controlled Malware Emerges: Remote Control via Gemini Exploitation, Interference with Forced Termination\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4150,"outputTokens":567,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1782193464,"createdAt":"2026-06-23T05:36:06.000Z","publishedAt":"2026-06-23T05:40:24.000Z","updatedAt":"2026-06-23T05:40:24.000Z"},"cluster":{"id":"c_db0f84e871ab03cb922b49fa","canonicalTitle":"AIが操作するマルウェア、現る。Gemini悪用で遠隔操作、強制終了の妨害も","representativeArticleId":"a_6660859d08d026626ef81cc0","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-06-23T05:00:00.000Z","lastSeenAt":"2026-06-23T05:00:00.000Z","updatedAt":"2026-06-23T05:40:24.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/412/4412414/?rss","title":"AIが操作するマルウェア、現る。Gemini悪用で遠隔操作、強制終了の妨害も"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["ESET researchers identified PromptSpy, the first Android malware to use generative AI in its execution flow.","The malware uses Google Gemini to analyze on-screen elements and generate instructions to keep the malicious app pinned in the recent apps list, preventing forced termination.","PromptSpy deploys a built-in VNC module for remote device control and exploits accessibility services to block uninstallation, capture lock screen data, and record video.","The campaign primarily targets users in Argentina, with development clues pointing to a Chinese-language environment.","The malware is distributed through dedicated websites, not Google Play, and Google Play Protect automatically blocks known versions."]}