Chinese-developed PromptSpy malware exploits Gemini AI to hack Android devices

• PromptSpy malware uses Gemini to automate its persistence
• The malware blocks removal through an AI-guided interface control
• Gemini interprets screen data and returns actionable gestures

Security experts have revealed new findings on PromptSpy, an Android malware whose code contains a predefined prompt and AI configuration that are hardcoded and cannot be changed at runtime.

The malware uses Google’s Gemini to interpret on-screen elements and provide step-by-step instructions for interacting with the user interface.

By sending XML snapshots of the device screen to Gemini, PromptSpy receives precise gestures, taps, and swipes needed to keep its app pinned in the recent apps list.

Persistence ...