Fetching from the wire…
01
02
03
04
05
06
07
08
Top 5 · 2026-02-20 · source-backed
ESET researchers disclosed PromptSpy, the first known malware that weaponizes Google's Gemini AI at runtime. The malware sends device screen data to Gemini, which returns natural-language instructions for achieving persistence — tapping specific UI elements, avoiding detection, maintaining background access. It includes lockscreen capture, screen recording, and a full VNC module. Distribution masquerades as Chase Bank. This is a paradigm shift: malware that adapts to arbitrary device states by delegating decision-making to a foundation model is fundamentally harder to detect than signature-based threats. What to do: Audit your AI API keys' usage patterns. If you're building mobile apps, ensure accessibility services permissions are properly restricted. This validates the "cognitive rootkit" attack class.
Each link below shares sources, entities, or timing with this story.
Gemini built by Google / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Gemini built by Google); both cover Audit, Gemini, Google; overlapping topics (access, audit, gemini).
Linked by a graph relationship (Gemini built by Google); both cover Gemini, Google; overlapping topics (android, apps, attack, background, gemini).
Google released Workspace / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released Workspace); both cover Distribution, Gemini, Google; overlapping topics (android, gemini).
Google released MCP / Shared entity: Gemini / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (Google released MCP); both cover Gemini; reported by the same outlet (thehackernews.com).
Google released AI Studio / Shared entities / What happened next
Linked by a graph relationship (Google released AI Studio); both cover Audit, Gemini, Google; picks up the Audit thread on 2026-05-16.
Gemini built by Google / Shared entities / What happened next
Linked by a graph relationship (Gemini built by Google); both cover Audit, Gemini, Google; picks up the Audit thread on 2026-04-14.
Google deprecates Gemini CLI / Shared entities / What happened next
Linked by a graph relationship (Google deprecates Gemini CLI); both cover Distribution, Gemini, Google; picks up the Distribution thread on 2026-04-05.
Gemini built by Google / Shared entities / Same source
Linked by a graph relationship (Gemini built by Google); both cover Gemini, PromptSpy; cite the same source (PromptSpy).