Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly

Google has identified a novel threat actor leveraging an experimental VB Script malware called PROMPTFLUX, which uniquely interacts with its Gemini AI model API to generate self-modifying source code aimed at enhancing obfuscation and evasion techniques. This development highlights a sophisticated use of AI-driven code manipulation, where the malware dynamically requests specific obfuscation from Gemini, representing a significant advancement in malware adaptability and posing new challenges for cybersecurity defenses.