Cybersecurity firm ESET has discovered malware that uses generative AI to steal smartphone data. Researchers at the firm claim that the malware, called ‘PromptSpy‘, can use Google’s AI chatbot Gemini to determine what to do before attacking an Android smartphone. This is the first example of generative AI being used directly in Android-based malware.
The malware has been found impersonating a banking app called “MorganArg” (likely shorthand for Morgan Argentina), featuring an icon inspired by JPMorgan Chase to lure users.
ESET said that traditional malware is usually run through specific pre-written scripts. As a result, their effectiveness is often limited to a specific device or user interface. But PromptSpy collects information displayed on the smartphone screen before the attack and sends it to Gemini and asks for instructions on the next step. This allows the malware to quickly adapt to smartphones made by different manufacturers and different interfaces.
Research has shown that the PromptSpy malware, before entering the smartphone, sends screen information to Gemini in XML (Extensible Markup Language) format. It contains information about various elements of the smartphone’s interface, text, type, and location on the screen. Gemini analyzes that information and sends instructions in JSON (JavaScript Object Notation) format.
Specifically, the malware uses Gemini to achieve persistence by figuring out how to “Lock” or “Pin” itself in the device’s Recent Apps list. This ensures the app cannot be easily swiped away or closed by the system, allowing it to stay active in the background indefinitely.
The malware then uses Android’s accessibility service to access the smartphone and collect various information, including passwords, using that prompt. PromptSpy malware has a built-in VNC (Virtual Network Computing) module, which allows it to remotely control an infected smartphone. The malware can instantly monitor screen information. It also collects a list of apps installed on the smartphone, steals lockscreen PINs and passwords, captures screenshots, records screen activities and touches, gestures, and collects information about apps used.
You may also like: TWS devices are vulnerable to cyber attacks
Because PromptSpy uses invisible overlays to block the “Uninstall” and “Force Stop” buttons, traditional removal is nearly impossible. To remove the infection, users must reboot their device into Safe Mode, where third-party apps are disabled, allowing the “MorganArg” app to be uninstalled safely.
However, there is no evidence of the malware spreading widely so far, and ESET suggests it may currently be a sophisticated proof-of-concept targeting specific regions.