{"id":312901,"date":"2026-02-23T11:19:10","date_gmt":"2026-02-23T11:19:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/312901\/"},"modified":"2026-02-23T11:19:10","modified_gmt":"2026-02-23T11:19:10","slug":"eset-research-discovers-promptspy-the-first-android-threat-to-use-generative-ai","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/312901\/","title":{"rendered":"ESET Research discovers PromptSpy, the first Android threat to use generative AI"},"content":{"rendered":"

<\/a>
\nDUBAI , DUBAI, UNITED ARAB EMIRATES, February 23, 2026 \/EINPresswire.com<\/a>\/ — ESET<\/a> researchers have discovered PromptSpy, the first known Android malware to abuse generative AI in its execution flow to achieve persistence. It is the first time generative AI has been deployed in this manner. Because the attackers rely on prompting an AI model (specifically, Google\u2019s Gemini) to guide malicious UI manipulation, ESET has named this family PromptSpy. The malware can capture lockscreen data, block uninstallation attempts, gather device info, take screenshots, record screen activity as video, and more.\u00a0 This is the second AI-powered malware that ESET Research has discovered, following PromptLock in August 2025, the first known case of AI-driven ransomware.<\/p>\n

Based on language localization clues and the distribution vectors observed during analysis, this campaign appears to be financially motivated and seems to primarily target users in Argentina. However, PromptSpy has not been observed in ESET telemetry yet, possibly making it a proof of concept.

\nWhile generative AI is deployed only in a relatively minor part of PromptSpy’s code \u2014 the one responsible for achieving persistence \u2014 it still has a significant impact on the malware’s adaptability. Specifically, Gemini is used to provide PromptSpy with step-by-step instructions on how to make the malicious app \u201clocked\u201d, i.e. pinned, in the recent apps list (often represented by a padlock icon in the multitasking view of many Android launchers), thus preventing it from being easily swiped away or killed by the system. The AI model and prompt are predefined in the code and cannot be changed.\u00a0<\/p>\n

\u201cSince Android malware often relies on UI-based navigation, leveraging generative AI enables threat actors to adapt to more or less any device, layout, or operation system version, which can greatly increase the pool of potential victims,\u201d says ESET researcher Luk\u00e1\u0161 \u0160tefanko, who discovered PromptSpy. \u201cThe main purpose of PromptSpy is to deploy a built-in VNC module, giving operators remote access to the victim\u2019s device. This Android malware also abuses Accessibility Services to block uninstallation with invisible overlays, captures lockscreen data, and records screen activity as video. It communicates with its Command & Control server via AES encryption,\u201d adds \u0160tefanko.<\/p>\n

PromptSpy is distributed by a dedicated website and has never been available on Google Play. As an App Defense Alliance partner, ESET nevertheless shared the findings with Google. Android users are automatically protected against known versions of this malware by Google Play Protect, which is enabled by default on Android devices with Google Play Services.<\/p>\n

\u201cEven though PromptSpy uses Gemini in just one of its features, it still demonstrates how implementing these tools can make malware more dynamic, giving threat actors ways to automate actions that would normally be more difficult with traditional scripting,\u201d says \u0160tefanko.<\/p>\n

With the app\u2019s name being MorganArg and its icon seemingly inspired by Morgan Chase, the malware is likely impersonating the Morgan Chase bank. MorganArg, likely a shorthand for \u201cMorgan Argentina\u201d, also appears as the name of the cached website, suggesting a regional targeting focus.<\/p>\n

Because PromptSpy blocks uninstallation by overlaying invisible elements on the screen, the only way for a victim to remove it is to reboot the device into Safe Mode, where third party apps are disabled and can be uninstalled normally. To enter Safe Mode, users should typically press and hold the power button, long press Power off, and confirm the Reboot to Safe Mode prompt (though the exact method may differ by device and manufacturer). Once the phone restarts in Safe Mode, the user can go to Settings \u2192 Apps \u2192 MorganArg and uninstall it without interference.<\/p>\n

For a more detailed analysis of PromptSpy check out the latest ESET Research blogpost \u201cPromptSpy ushers in the era of Android threats using GenAI\u201d\u00a0 on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X),\u00a0BlueSky, and\u00a0Mastodon\u2002for the latest news from ESET Research.<\/p>\n

About ESET

\nESET\u00ae provides cutting-edge cybersecurity to prevent attacks before they happen. By combining the power of AI and human expertise, ESET stays ahead of emerging global cyberthreats, both known and unknown\u2014securing businesses, critical infrastructure, and individuals. Whether it\u2019s endpoint, cloud, or mobile protection, our AI-native, cloud-first solutions and services remain highly effective and easy to use. ESET technology includes robust detection and response, ultra-secure encryption, and multifactor authentication. With 24\/7 real-time defense and strong local support, we keep users safe and businesses running without interruption. The ever-evolving digital landscape demands a progressive approach to security: ESET is committed to world-class research and powerful threat intelligence, backed by R&D centers and a strong global partner network. For more information, visit\u00a0ESET Middle East\u00a0or follow us on LinkedIn, Facebook & X.<\/p>\n

Sanjeev Kant
Vistar Communications
+971 55 972 4623
email us here<\/a><\/p>\n

\n Legal Disclaimer:\n<\/p>\n

\n EIN Presswire provides this news content “as is” without warranty of any kind. We do not accept any responsibility or liability
\n for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this
\n article. If you have any complaints or copyright issues related to this article, kindly contact the author above.\n<\/p>\n

\"\"<\/p>\n

You just read:<\/p>\n

News Provided By<\/p>\n

\n February 23, 2026, 10:32 GMT\n <\/p>\n

\n
EIN Presswire’s priority is author transparency. We do our best to weed out false and misleading content. The content above is
\nthe sole responsibility of the author who makes it available. If you have any complaints, kindly contact the author above.\n <\/p>\n","protected":false},"excerpt":{"rendered":"DUBAI , DUBAI, UNITED ARAB EMIRATES, February 23, 2026 \/EINPresswire.com\/ — ESET researchers have discovered PromptSpy, the first…\n","protected":false},"author":2,"featured_media":312902,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[16284,61,60,80],"class_list":["post-312901","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-eset","tag-ie","tag-ireland","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/312901","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=312901"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/312901\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/312902"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=312901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=312901"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=312901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}