ESET Threat Report H1 2026 Highlights Malicious AI Skills, ClickFix Surge, and EDR Killers

ESET’s H1 2026 threat report warns that attackers are accelerating traditional playbooks by wrapping them in AI-branded lures, agent extensions, and automation; notable trends include a surge in QR-code phishing, an AI-assisted Android remote-access trojan (PromptSpy), prolific EDR-killer tooling used by ransomware, and thousands of suspicious/malicious AI skills—prompting defenders to focus on AI supply-chain inspection, hardening user-assisted execution paths, and treating EDR tampering as a primary ransomware indicator.