New Android Malware PromptSpy Uses Google Gemini AI to Steal Data

New Android malware called PromptSpy uses Google Gemini AI to change its behavior and steal your data. This is the first time AI has been used this way in malware.
By Newsroom | Technology, Cybersecurity |

New forms of malicious software are emerging, utilizing advanced artificial intelligence to alter their behavior in real-time. PromptSpy, a recently identified Android malware, stands out as the first known instance of its kind to integrate Google Gemini, a generative AI model, directly into its operational process. This development signals a shift from traditional malware, which typically relies on fixed, pre-programmed instructions. The use of AI allows PromptSpy to adapt to the unique characteristics of individual Android devices and user interfaces, potentially increasing its effectiveness and elusiveness.

Genesis of an Adaptive Threat

The discovery of PromptSpy by researchers at ESET marks a significant moment in cybersecurity. Unlike older malware that might be designed for a specific device model or operating system version, PromptSpy demonstrates an ability to learn and adjust.

  • ESET's findings indicate that PromptSpy employs Google Gemini to interpret on-screen elements of a compromised device.

  • Based on this interpretation, the AI provides dynamic instructions, guiding the malware on how to perform specific actions.

  • One noted action is maintaining presence within the "recent apps" list, a technique that can help evade detection.

This adaptive capability means that the malware does not need to be updated with new code to function on different devices. Instead, it uses AI to figure out how to operate on each target system.

Read More: OpenAI Banned Suspect's ChatGPT Account Months Before Tumbler Ridge Shooting

Data Collection and Remote Control

PromptSpy's primary function appears to be espionage and remote control. Once installed on an Android device, it possesses several concerning capabilities:

This Android malware uses Google Gemini to think and act - 1

  • Information Theft: It can access and steal sensitive data such as lock screen PINs and passwords.

  • Screen Monitoring: The malware is capable of capturing screenshots and recording screen activity as video.

  • App Data Gathering: It can upload a list of all installed applications and gather information about the apps currently in use.

  • Remote Access: A key feature is its Virtual Network Computing (VNC) module, which enables attackers to view the device's screen and execute commands remotely, effectively taking over the device.

The AI Advantage: Adaptability Over Rigidity

The core innovation of PromptSpy lies in its use of generative AI. Traditional malware is often brittle; its coded instructions work only under specific conditions. If a device's interface changes even slightly, the malware might fail.

  • PromptSpy circumvents this limitation by using Gemini. The AI model acts as an interpreter, allowing the malware to understand the current state of the device's screen.

  • This interpretation enables PromptSpy to dynamically adjust its actions, making it more resilient to variations across Android devices.

  • Researchers suggest this allows the malware to assimilate into different environments without relying on a fixed, script-based approach.

PromptSpy is not an isolated incident but appears to be part of a growing trend of threat actors leveraging artificial intelligence.

  • PromptFlux Malware: Reports from November 2025 detail PromptFlux, malware that uses the Gemini AI model API to rewrite its own source code hourly. This is primarily for better obfuscation and evading antivirus software. The prompts sent to Gemini are specific, requesting code changes for antivirus evasion.

  • State-Sponsored Actors: Google Threat Intelligence has also observed state-backed actors from countries like China, Iran, and North Korea actively misusing AI models, including Gemini, for tasks such as reconnaissance, creating phishing materials, and developing new tools.

  • "Promptware" Attacks: Researchers have demonstrated "promptware" attacks, where AI models like Gemini can be tricked through crafted inputs, such as malicious calendar event descriptions, to perform unintended actions, including controlling smart home devices.

Despite these advancements, current reports suggest that many of these AI-powered malware types do not yet pose a direct, large-scale threat. However, the capabilities observed point towards a future where AI is increasingly embedded in cyber operations, blurring the lines between AI-as-a-service and malware-as-a-service.

ESET's Guidance

In response to the discovery of PromptSpy, ESET researchers recommend that users reboot infected devices into Safe Mode as a measure to combat this type of sophisticated malware.

Read More: Persona age verification system exposed user data including ID documents and selfies

Sources

Frequently Asked Questions

Q: What is PromptSpy and how does it use Google Gemini AI?
PromptSpy is a new type of malware for Android phones. It uses Google Gemini, a powerful AI, to understand and change how it works on different phones. This helps it steal information better.
Q: How does PromptSpy steal sensitive data from Android phones?
PromptSpy can steal your lock screen PINs and passwords. It can also record your screen activity as video and take screenshots. It sends this information to attackers.
Q: Why is PromptSpy considered a new and advanced threat?
Unlike older malware that has fixed instructions, PromptSpy uses AI to adapt to each phone's unique setup. This makes it harder to detect and remove because it doesn't need new code to work on different devices.
Q: What other actions can PromptSpy perform on an Android device?
PromptSpy can stay hidden in the 'recent apps' list to avoid detection. It can also upload a list of all your installed apps and gather information about apps you are currently using. It has a feature to let attackers control your phone remotely.
Q: What is the advice from ESET researchers for dealing with PromptSpy?
ESET, the company that found PromptSpy, suggests restarting your infected Android phone in Safe Mode. This can help stop the malware from running and protect your data.