ESET Threat Report H1 2026

ESET analyzed nearly 900,000 AI skills in H1 2026, finding thousands of suspicious and malicious instances. Researchers identified PromptSpy, the first Android malware using Google's Gemini for adaptive execution. ClickFix detections more than doubled, and QR code phishing reached record levels. Ransomware activity continued with over 100 EDR killers documented.