PromptSpy Android malware uses generative AI to adapt its persistence

bleepingcomputer.com — February 20, 2026 at 12:02 AM UTC

Android malware named PromptSpy is the first known to use generative AI at runtime. PromptSpy utilizes Google's Gemini AI to adapt its persistence methods across different Android devices by analyzing screen layouts and generating instructions. The malware also functions as spyware, offering remote access and employing techniques to hinder uninstallation, though its widespread use remains unconfirmed.

With a significance score of 5.9, this news ranks in the top 0.3% of today's 31980 analyzed articles.

Get summaries of news with significance over 5.5 (usually ~10 stories per week). Read by 10,000+ subscribers:

Most significant articles on this story:

[5.9]

PromptSpy Android malware uses generative AI to adapt its persistence (bleepingcomputer.com)

23h

Source

[5.4]

PromptSpy Android malware uses Gemini AI for persistence (computerweekly.com)

1d 4h

Source

[5.1]

New Android malware PromptSpy uses generative AI to target users in Argentina (welivesecurity.com)

1d 9h

Source (Spanish)

[4.9]

Android malware PromptSpy uses Google Gemini to automate its persistence (bankinfosecurity.com)

Source

[4.9]

Android malware PromptSpy uses Google Gemini for hacking assistance (au.pcmag.com)

1d 4h

Source

[4.4]

Android malware uses Gemini AI for device control (theregister.com)

1d 5h

Source

[4.2]

Android malware PromptSpy uses Google Gemini for hacking instructions (pcmag.com)

1d 5h

Source

[4.2]

Android malware PromptSpy uses Google Gemini for persistence (infosecurity-magazine.com)

10h

Source

[3.1]

New Android malware uses AI to control smartphones (bild.de)

11h

Source (German)