PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence

ESET researchers uncovered PromptSpy, an Android malware that uniquely uses Google’s Gemini generative AI to analyze on‑screen UI dumps and return JSON instructions to automate taps and other interactions via accessibility services, enabling persistent pinning in recent apps. PromptSpy deploys a built‑in VNC module for remote access, captures lockscreen PINs/passwords, screenshots and screen recordings, prevents uninstallation via invisible overlays, retrieves a Gemini API key from its C2 (54.67.2.84), and is distributed via malicious websites targeting users in Argentina.