PromptSpy ushers in the era of Android threats using GenAI

ESET researchers discovered PromptSpy, the first Android malware to abuse generative AI. The malware uses Google's Gemini to analyze screens and provide step-by-step instructions for maintaining persistence. PromptSpy deploys a VNC module for remote access, abuses Accessibility Service to block uninstallation, and captures lockscreen data.