PromptSpy is the first known Android malware to use generative AI at runtime

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini ...
The Hacker News

PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence

PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based ...

Google says its AI systems helped deter Play Store malware in 2025

Google said it prevented 1.75 million bad apps from going live on Google Play during 2025, a figure that's down from previous ...

Fake ‘Antivirus’ App Spreads Android Malware, Steals Banking Credentials

A fake Android antivirus app called TrustBastion is spreading malware and stealing banking credentials. Here’s how it works and how to stay protected.
CSO Online

Keenadu: Android malware that comes preinstalled and can’t be removed by users

Keenadu infiltrated devices by posing as legitimate system components, prompting calls for tighter controls on firmware ...
The Hacker News

CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware

CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for ...
Infosecurity Magazine

Android Malware Hijacks Google Gemini to Stay Hidden

A new Android malware implant using Google Gemini to perform persistence tasks was discovered on VirusTotal and analyzed by ESET ...
PCMag on MSN

This Android Malware Connects to Google Gemini for Tips on Hacking Targets

'PromptSpy' appears to be the first Android malware that uses generative AI in its execution flow, according to antivirus provider ESET.