Researchgeminiandroidesetmalware
PromptSpy Integrates Gemini To Achieve Persistence
8.2
Relevance Score
On February 19, 2026, ESET disclosed PromptSpy, an Android trojan that integrates Google's Gemini generative model into its runtime to interpret device UI and generate interaction instructions. ESET says the samples appear limited and possibly targeted at Argentine users, but the proof-of-concept shows AI-driven persistence and raises urgent needs for runtime AI-detection, model-call controls, and updated mobile defenses.
