PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence

Cybersecurity firm ESET has identified PromptSpy, the first Android malware to exploit Google's Gemini AI chatbot as part of its operational flow, enabling it to maintain persistence on infected devices. This malware can capture lockscreen data, prevent uninstallation, collect device information, and take screenshots, demonstrating a novel method of leveraging AI chatbots for malicious purposes.