ESET Uncovers PromptSpy: First Android Malware Using Generative AI

A new Android malware known as PromptSpy has been identified by ESET Research as the first threat to utilize generative artificial intelligence in its operations. This advanced malware is capable of capturing lockscreen data, blocking uninstallation attempts, gathering device information, and recording screen activity as video. PromptSpy represents a significant step in the evolution of mobile threats, following the discovery of PromptLock last year, which was the first AI-driven ransomware.

In its analysis, ESET emphasizes that this campaign appears to be financially motivated, primarily targeting users in Argentina. The conclusion regarding its financial motivations stems from clues related to language localization and the distribution methods employed.

How PromptSpy Operates

According to ESET, the malware utilizes a tool called Gemini to provide detailed instructions for making the malicious application, named MorganArg, appear “locked” in the recent apps list. This feature, often represented by a padlock icon, prevents the app from being easily dismissed or terminated by the system.

Lukáš Štefanko, the researcher who discovered PromptSpy, noted that generative AI allows the malware to adapt to various devices, layouts, and operating system versions. This adaptability significantly broadens the potential victim pool. The primary function of PromptSpy is to deploy a built-in Virtual Network Computing (VNC) module, granting operators remote access to compromised devices.

Beyond remote access, PromptSpy also exploits Accessibility Services to obstruct uninstallation through invisible overlays. This capability, combined with its other features, makes it a particularly dangerous threat.

Distribution and Removal Challenges

Importantly, PromptSpy has never been available through the Google Play Store. Instead, it is distributed via a dedicated website, posing a risk to users who may inadvertently download it. ESET has communicated its findings to Google, and fortunately, Android users benefit from automatic protection against known versions of this malware through Google Play Protect.

The only method for removing the MorganArg app is to boot the device into Safe Mode, as standard uninstallation procedures are blocked. This presents a significant challenge for affected users, underscoring the importance of cybersecurity awareness and caution regarding app installations.

ESET’s discovery of PromptSpy highlights the evolving landscape of mobile threats. As malware increasingly incorporates advanced technologies like generative AI, users must remain vigilant to protect their devices and personal information.