Ledger / Jun 2025
PROMPTFLUX malware rewrote itself hourly through the Gemini API
Confirmed
Google analyzed samples and disabled the API assets.
A VBScript dropper called Gemini to obfuscate and regenerate its own code to evade antivirus.
“ensuring the new variant remains viable”Google Threat Intelligence Group
Sources
- GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI ToolsGoogle Threat Intelligence Group · 5 Nov 2025 · primary source
- Date
- Jun 2025
- Disclosed
- 5 Nov 2025
- Actor
- Unattributed (financially motivated indicators) (criminal), as attributed by Google Threat Intelligence Group
- Targets
- Broad, industry-agnostic lures
- What the AI did
- LLM inside malware, Evasion
- Model
- Gemini (gemini-1.5-flash-latest)
- Model family
- Model basis
- stated by vendor
- Autonomy
- semi-autonomous
- Outcome
- Experimental dropper; Google disabled the assets; no victim compromise shown.