Android malware uses Gemini AI for persistence

A new Android malware, "Prompt-Spy," uses Google's Gemini AI to evade detection and maintain persistence on devices. The malware captures lock screen data, disables uninstallation, and records screen activity. Gemini provides step-by-step instructions to keep the malicious app hidden in recent apps, preventing easy removal. Prompt-Spy aims to deploy a VNC module for remote access and was distributed via a fake Argentinian bank website, indicating a financially motivated campaign.