Ledger / 11 May 2026
PROMPTSPY Android backdoor drives the phone UI through Gemini
Confirmed
GTIG reverse engineered the malware and found the hardcoded Gemini prompt and model name.
ESET first identified PROMPTSPY; GTIG found a GeminiAutomationAgent module that lets an LLM decide gestures from the live UI state. Date shown is the GTIG report month; first-seen date was not verified.
“PROMPTSPY, an Android backdoor first identified by ESET”Google Threat Intelligence Group
Sources
- GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial AccessGoogle Threat Intelligence Group · 11 May 2026 · primary source
- PromptSpy ushers in the era of Android threats using GenAIESET (WeLiveSecurity) · 19 Feb 2026 · primary source
- Disclosed
- 11 May 2026
- Activity
- 2026
- Actor
- Unnamed (unknown), as attributed by Google Threat Intelligence Group
- Targets
- Android users
- What the AI did
- LLM inside malware, Agentic intrusion, Evasion
- Model
- Google gemini-2.5-flash-lite, Google Gemini
- Model family
- Model basis
- stated by vendor
- Autonomy
- autonomous
- Outcome
- Malware sends the screen's UI hierarchy to Gemini and executes returned click and swipe actions.